CVE-2006-5146

CVE-2006-5146 involves multiple cross-site scripting (XSS) flaws in Yblog. The vulnerability allows remote attackers to inject arbitrary web script or HTML through (1) the id parameter in funk.php and (2) the action parameter in tem.php and uss.php. Documents do not provide affected versions, exa...