EUVD-2006-2178

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-2177

CVE-2006-2177 describes a Cross-site Scripting (XSS) vulnerability in geoBlog 1.0’s viewcat.php, exploitable by passing a crafted value in the cat parameter to inject arbitrary script/HTML. The vulnerability is confirmed in multiple sources (NVD entry; related CVE records) and affects geoBlog 1.0...