Security Advisory

CVE-2006-3514

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2006-07-11 23:00:00
Last updated 2024-08-07 18:30:34
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the (1) name, (2) title, (3) news, (4) description, and (5) sitename parameters.