Yblog funk.php id Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/20280/info Yblog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in...

CVE-2006-5146

CVE-2006-5146 involves multiple cross-site scripting (XSS) flaws in Yblog. The vulnerability allows remote attackers to inject arbitrary web script or HTML through (1) the id parameter in funk.php and (2) the action parameter in tem.php and uss.php. Documents do not provide affected versions, exa...