CVE-2008-6476

The CVE-2008-6476 entry refers to a Cross-site scripting (XSS) vulnerability in BlogEngine.NET . The issue affects the page blog/search.aspx where input from the q parameter can be used to inject arbitrary web script/HTML. Root cause: insufficient input sanitization on the user-controlled query p...

CVE-2008-6476: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blog/search.aspx in BlogEngine.NET allows remote attackers to inject arbitrary web script or HTML via the q parameter...