CVE-2006-0409

CVE-2006-0409 describes a cross-site scripting (XSS) vulnerability in the Pixelpost Photoblog 1.4.3 implementation of index.php, exploitable via the "Add Comment" field in a comment popup. The affected component is the comment handling code in Pixelpost’s index.php, with the underlying cause bein...