CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

CVE-2009-4093

The CVE-2009-4093 entry describes multiple cross-site scripting (XSS) vulnerabilities in Simplog 0.9.3.2 and possibly earlier, exploitable through the cname (Name) or email parameters in comments.php. The affected component is the comments.php handling in Simplog, with the underlying issue being ...