CVE-2007-2781

Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTML, probably via vectors related to a certain data2 array element.

🔗 References (12)

• cve@mitrehttp://osvdb.org/36076
• cve@mitrehttp://secunia.com/advisories/25308
• cve@mitrehttp://sourceforge.net/project/shownotes.php?release_id=509254
• cve@mitrehttp://wikyblog.svn.sourceforge.net/viewvc/wikyblog/trunk/include/sessionRegister.php?r1=127&r2=133
• cve@mitrehttp://wikyblog.svn.sourceforge.net/viewvc/wikyblog/trunk/include/sessionRegister.php?view=log
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/34373
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/36076
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/25308
• af854a3a-2127-422b-91ae-364da2661108http://sourceforge.net/project/shownotes.php?release_id=509254
• af854a3a-2127-422b-91ae-364da2661108http://wikyblog.svn.sourceforge.net/viewvc/wikyblog/trunk/include/sessionRegister.php?r1=127&r2=133
• af854a3a-2127-422b-91ae-364da2661108http://wikyblog.svn.sourceforge.net/viewvc/wikyblog/trunk/include/sessionRegister.php?view=log
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/34373