Description
Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters.
References
- perlblog-weblog-xss(24691) vdb-entry
- 20060227 [eVuln] PerlBlog Multiple Vulnerabilities mailing-list
- http://evuln.com/vulns/81/summary.html
- 508 third-party-advisory
- 18924 third-party-advisory
- 16707 vdb-entry