Skip to content
OpenAdvisories
Unscored CVE-2011-5029 EUVD-2011-4934GHSA-pfh3-qfx5-mqgv

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrar…

Published Dec 29, 2011 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.php or (2) category parameter to index.php.

References