CVE-2006-5922: Undefined Security Weakness

index.php in Wheatblog wB allows remote attackers to obtain sensitive information via certain values of the postPtr and next parameters, which reveals the path in an error message...

wheatblogXSS.txt

vendor site: http://wheatblog.sourceforge.net/ product : Wheatblog bug: multiple xss post & full path disclosure risk : medium xss post : /addcomment.php vulnerable fieds : - Name - WWW - Comment impact: an attacker can steal the cookie from every persons who is watching at the comments. full pat...