CVE-2007-1248

CVE-2007-1248 affects built2go News Manager Blog 1.0 with multiple reflected XSS vulnerabilities. The issue allows remote attackers to inject arbitrary script or HTML via the cid, uid, and nid parameters to news.php, and the nid parameter to rating.php. The connected records confirm the same desc...

CVE-2007-1248: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 cid, 2 uid, and 3 nid parameters to a news.php, and the nid parameter to b rating.php...