CVE-2006-0473

The CVE-2006-0473 issue is a Cross-site Scripting (XSS) vulnerability in the bbcode function of weblog.php in "my little homepage / my little weblog" (last modified April 2004). Remote attackers can inject arbitrary Javascript via a javascript: URI in BBcode link tags. Documents confirm the vulne...