Security Advisory
CVE-2009-4580
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple cross-site scripting (XSS) vulnerabilities in Hasta Blog 2.3 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) yorumyaz.php and (2) blog.php.