Unscored CVE-2006-1077 EUVD-2006-1081GHSA-5cf3-7cgv-9rv9

Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web scr…

Published Mar 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters.

References

16983 vdb-entry
20060306 evoBlog Remote Name tag Script injection mailing-list
20060423 Re: evoBlog Remote Name tag Script injection mailing-list
544 third-party-advisory
23826 vdb-entry