Description
Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.
References
- http://hamid.ir/security/pluggedoutblog.txt
- 20060206 VERIFY Pluggedout Blog 1.9.9c problem.php XSS mailing-list
- ADV-2006-0440 vdb-entry
- 18726 third-party-advisory
- pluggedoutblog-problem-xss(24482) vdb-entry
- 1015586 vdb-entry
- 20060204 PluggedOut Blog SQL injection and XSS mailing-list
- 22927 vdb-entry