CVE-2006-2820

The CVE-2006-2820 entry concerns HotWebScripts.com Weblog Oggi 1.0 and describes a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via a comment, with a possible Javascript URI in the SRC attribute of an IMG element. The provided ...