CVE-2008-3884

Cross-site scripting XSS vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176...

CVE-2008-3885

Cross-site request forgery CSRF vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information...