CVE-2006-1761

CVE-2006-1761 describes a cross-site scripting vulnerability in blur6ex 0.3.452, where the error message in index.php is not sanitised, allowing remote attackers to inject arbitrary web script or HTML via the errormsg parameter. The issue is explicitly tied to the errormsg field (the shard parame...