Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2006-01-26T22:00:00
Updated: 2024-08-07T16:34:14.814Z
Reserved: 2006-01-26T00:00:00
Link: CVE-2006-0443

No data.

Status : Deferred
Published: 2006-01-26T22:03:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2006-0443

No data.