Unscored CVE-2006-3514 EUVD-2006-3509GHSA-96qg-8vqq-23ch

Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote …

Published Jul 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the (1) name, (2) title, (3) news, (4) description, and (5) sitename parameters.

References

php-blogger-adminactions-xss(27630) vdb-entry
ADV-2006-2710 vdb-entry
20060707 PHP-Blogger Multiple Cross Site Scripting Vulnerabilities mailing-list
20989 third-party-advisory
1202 third-party-advisory
18909 vdb-entry