CVE-2014-10007

CVE-2014-10007 : Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary script/HTML via the name, email, or subject parameters in a contact action to index.php. The affected software is Maian Weblog (versions up to 4.0 and ea...

CVE-2008-2200

Maian Weblog 4.0 is affected by multiple cross-site scripting (XSS) vulnerabilities. The CVE-2008-2200 entry specifies exploitable vectors in the web app: (1) keywords parameter to admin/index.php in a blogs search action, (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, an...