2 matches found
CVE-2006-0233
CVE-2006-0233 refers to a cross-site scripting (XSS) vulnerability in the PHP file functions.php of the microBlog 2.0 RC-10 package. The issue allows remote attackers to execute arbitrary web script and HTML by supplying a javascript: URI in a [url] BBCode tag, potentially compromising user sessi...
CVE-2006-0233
Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...