Unscored CVE-2006-1122 EUVD-2006-1126GHSA-6475-jmjf-q7vc

Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script…

Published Mar 9, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

References

17035 vdb-entry
559 third-party-advisory
ADV-2006-0896 vdb-entry
d2kblog-default-msg-xss(25214) vdb-entry
23771 vdb-entry
20060308 [KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities mailing-list
19177 third-party-advisory