CVE-2009-0455: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the anonymous comments feature in lib-comment.php in glFusion 1.1.0, 1.1.1, and earlier versions allows remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php...

CVE-2009-0455

The CVE concerns glFusion’s anonymous comments feature. Affected product/version: glFusion 1.1.0, 1.1.1, and earlier. Vulnerability: Cross-site scripting (XSS) in lib-comment.php allowing remote attackers to inject arbitrary web script or HTML via the username parameter to comment.php. Root cause...

CVE-2006-3756: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Geeklog 1.4.0sr4 and earlier, and 1.3.11sr6 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when validating comments in 1 lib-comment.php 1.4.0sr4 or 2 comment.php 0.3.11sr6...