Unscored CVE-2006-2820 EUVD-2006-2817GHSA-cgv2-3mf8-8qf4

Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTM…

Published Jun 5, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element.

References

1028 third-party-advisory
18240 vdb-entry
weblog-oggi-comment-xss(26928) vdb-entry
20447 third-party-advisory
20060602 Weblog Oggi v1.0 mailing-list