Yblog funk.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20280/info Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in...

CVE-2006-5146

CVE-2006-5146 involves multiple cross-site scripting (XSS) flaws in Yblog. The vulnerability allows remote attackers to inject arbitrary web script or HTML through (1) the id parameter in funk.php and (2) the action parameter in tem.php and uss.php. Documents do not provide affected versions, exa...

CVE-2006-5146: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in a funk.php, or the 2 action parameter in b tem.php and c uss.php...