Some vulnerabilities have been discovered in QuickBlogger, which can be exploited by malicious people to conduct script insertion attacks or gain knowledge of potentially sensitive information.

1) Input passed to the author and comment body when posting a comment is not properly sanitised before being used. This can be exploited to inject arbitrary HTML and script code, which will get executed in a user's browser session in context of an affected site when the malicious user data is viewed.

2) Input passed to the "request" parameter in acc.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources or conduct cross-site scripting attacks when error messages are returned.

Successful exploitation requires that "magic_quotes_gpc" is disabled.

The vulnerabilities have been confirmed in version 1.4. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly sanitised.
Further details available in Customer Area

Provided and/or discovered by
1) Donnie Werner, exploitlabs.
2) Patriotic Hackers

Additional information by Steven Christey.

Changelog
Further details available in Customer Area

Original Advisory
http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt

Deep Links
Links available in Customer Area