CVE-2006-7002

Cross-site scripting XSS vulnerability in addcomment.php in Wheatblog wB 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may...

CVE-2006-5921

CVE-2006-5921 describes cross-site scripting (XSS) in Wheatblog (wB) via add_comment.php. Vulnerable fields are the user-supplied inputs “Name,” “WWW,” and “Comment.” The issue is noted to potentially overlap CVE-2006-5195. Connected documents provide no explicit patch/version details or mitigati...

CVE-2006-5195

CVE-2006-5195 (Wheatblog 1.0/1.1) and related CVEs describe multiple XSS vulnerabilities in Wheatblog’s add_comment.php and related input fields, allowing remote injection of arbitrary script/HTML via unspecified vectors (CVE-2006-5195; CVE-2006-7002; CVE-2006-5921). Details indicate XSS through ...