Description
Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.
Metrics
CVSS 2.0 4.3/10
AV:N/AC:M/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.htmlExploit
- http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt
- http://secunia.com/advisories/15942Vendor Advisory
- http://securitytracker.com/id?1014386
- http://www.securityfocus.com/bid/14152
- http://www.vupen.com/english/advisories/2005/0987
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21244
- http://archives.neohapsis.com/archives/fulldisclosure/2005-07/0090.htmlExploit
- http://exploitlabs.com/files/advisories/EXPL-A-2005-011-quickblogger.txt
- http://secunia.com/advisories/15942Vendor Advisory
- http://securitytracker.com/id?1014386
- http://www.securityfocus.com/bid/14152
- http://www.vupen.com/english/advisories/2005/0987
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21244
Timeline
- Published
- Dec 31, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified