Description
Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry.
References
- ublog-text-xss(26267) vdb-entry
- ADV-2006-1671 vdb-entry
- 19981 third-party-advisory
- http://colander.altervista.org/advisory/UBlog.txt
- 20060507 UBlog Remote XSS Exploit mailing-list
- 25274 vdb-entry
- 17856 vdb-entry