Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags.
attrition.org/pipermail/vim/2006-January/000520.html
evuln.com/vulns/51/
evuln.com/vulns/51/summary.html
secunia.com/advisories/18628
securityreason.com/securityalert/378
www.osvdb.org/22753
www.securityfocus.com/archive/1/423167/100/0/threaded
www.securityfocus.com/bid/16395
www.vupen.com/english/advisories/2006/0349
exchange.xforce.ibmcloud.com/vulnerabilities/24310