CVE-2006-1582

CVE-2006-1582 describes a cross-site scripting (XSS) vulnerability in Blank'N'Berg 0.2, exploitable via the _path parameter in index.php. The root cause is an injection of arbitrary web script/HTML, potentially stemming from a directory traversal-related issue noted in the description. Affected s...

CVE-2006-1582: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this might be resultant from the directory traversal issue...