Unscored CVE-2007-4102 EUVD-2007-4086GHSA-m5wx-989q-4wj4

Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script…

Published Jul 31, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script via a leading '"/></> sequence in the search string.

References

2942 third-party-advisory
sblog-search-xss(35645) vdb-entry
25098 vdb-entry
20070726 sBlog 0.7.3 Beta XSS Vulnerabilitie mailing-list