Description
Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section.
References
- 20060808 Archangel Weblog 0.90.02 and prior Multiple HTML injections mailing-list
- 1016670 vdb-entry
- 19432 vdb-entry
- archangel-name-comment-xss(28287) vdb-entry
- 1360 third-party-advisory