Description
Multiple cross-site scripting (XSS) vulnerabilities in Gregarius 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_query parameter to search.php or (2) tag parameter to tags.php.
References
- 16939 vdb-entry
- 23679 vdb-entry
- 20060303 Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities mailing-list
- gregarius-multiple-xss(25058) vdb-entry
- ADV-2006-0819 vdb-entry
- 23678 vdb-entry
- 19102 third-party-advisory