Description
Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) prenom, (2) emailFrom, or (3) body parameters.
References
- 19943 vdb-entry
- 21853 third-party-advisory
- korviblog-livre-xss(28852) vdb-entry
- 20060911 KorviBlog - XSS permanent mailing-list