|
|
CVE Reference: CVE-2008-2200 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-2200 |
|
|
Description: Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) keywords parameter to admin/index.php in a blogs search action, the (2) msg_charset and (3) msg_header9 parameters to admin/inc/header.php, and the (4) keywords parameter to index.php in a search action. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/42207 SREASON http://securityreason.com/securityalert/3880 SAID Secunia Advisory: SA30060 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/491588/100/0/threaded BID 29032 |
|
| Return to the previous page. |
