Description
Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters.
References
- 20060417 Neuron Blog <= 1.1 XSS mailing-list
- 1015960 vdb-entry
- 17552 vdb-entry
- 19703 third-party-advisory
- neuronblog-addcomment-xss(25913) vdb-entry
- ADV-2006-1406 vdb-entry