CVE-2010-3025

Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit.
Configurations

Configuration 1 (hide)

cpe:2.3:a:tomaz-muraus:open_blog:1.2.1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-08-16 20:00

Updated : 2024-02-04 17:54


NVD link : CVE-2010-3025

Mitre link : CVE-2010-3025

CVE.ORG link : CVE-2010-3025


JSON object : View

Products Affected

tomaz-muraus

  • open_blog
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')