CVE-2007-0353

Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO string.

🔗 References (18)

• cve@mitrehttp://archives.neohapsis.com/archives/fulldisclosure/2007-01/0338.html
• cve@mitrehttp://mywebland.com/forums/showtopic.php?t=1224
• cve@mitrehttp://osvdb.org/32929
• cve@mitrehttp://osvdb.org/32930
• cve@mitrehttp://securityreason.com/securityalert/2155
• cve@mitrehttp://securitytracker.com/id?1017531
• cve@mitrehttp://www.securityfocus.com/archive/1/457206/100/0/threaded
• cve@mitrehttp://www.securityfocus.com/bid/22097
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/31554
• af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0338.html
• af854a3a-2127-422b-91ae-364da2661108http://mywebland.com/forums/showtopic.php?t=1224
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/32929
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/32930
• af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/2155
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017531