Description
Multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) yorumyaz.php and (2) blog.php.
References
- 10641 exploit
- 61349 vdb-entry
- 37975 third-party-advisory
- hastablog-id-xss(55052) vdb-entry
- http://packetstormsecurity.org/0912-exploits/hastablog-xss.txt