EUVD-2006-4817

Malware in sbrugna...

Blojsom 2.31 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/20026/info Blojsom is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser of...

CVE-2006-4829

Multiple cross-site scripting XSS vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the 1 blog-category-description, 2 blog-entry-title, 3 rss-enclosure-url, 4 technorati-tagsi, or 5 blog-category-name parameter in a blog post...

CVE-2006-4829

Multiple cross-site scripting XSS vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the 1 blog-category-description, 2 blog-entry-title, 3 rss-enclosure-url, 4 technorati-tagsi, or 5 blog-category-name parameter in a blog post...

CVE-2006-4830

CVE-2006-4830 affects Blojsom 2.30, via EditBlogTemplatesPlugin.java. A directory traversal vulnerability is triggered by an HTTP request containing a crafted blogTemplate value, with impact described as unknown in the entry. No exploitation details or patch information are provided in the connec...

CVE-2006-4829

CVE-2006-4829 describes multiple cross-site scripting (XSS) vulnerabilities in Blojsom 2.31, where remote attackers could inject arbitrary script or HTML via these blog post parameters: blog-category-description, blog-entry-title, rss-enclosure-url, technorati-tagsi, and blog-category-name. The a...

XSS vulnerability in Blojsom

I. BACKGROUND Taken from the Blojsom Website : "Blojsom is a Java-based, full-featured, multi-blog, multi-user software package that was inspired by blosxom. blojsom aims to retain a simplicity in design while adding flexibility in areas such as the flavors, templating, plugins, and the ability t...

Blojsom 2.31 - Cross-Site Scripting

Blojsom 2.31 - Cross-Site Scripting source: https://www.securityfocus.com/bid/20026/info Blojsom is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser ...

Blojsom 2.31 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/20026/info Blojsom is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the conte...