Cross site scripting

Cross-site scripting XSS vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element...

CVE-2006-2820

The CVE-2006-2820 entry concerns HotWebScripts.com Weblog Oggi 1.0 and describes a Cross-site Scripting (XSS) vulnerability. The issue allows remote attackers to inject arbitrary web script or HTML via a comment, with a possible Javascript URI in the SRC attribute of an IMG element. The provided ...

Weblog Oggi v1.0

Weblog Oggi v1.0 Homepage: http://www.hotwebscripts.com/index.php User input isn't sanatized before being dynamically generated. For proof of concept just put IMG SRC="javascript:alert'XSS';" in as a comment...