CVE

Id
10292  
CVE No.
CVE-2004-1865  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname). NOTE: if administrators are normally allowed to add HTML by other means, e.g. through Smarty templates, then this issue would not give any additional privileges, and thus would not be considered a vulnerability.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
70997 10292 CVE-2004-1865 BUGTRAQ:20040326 bblog 0.7.2 cross site scripting  View
70998 10292 CVE-2004-1865 URL:http://marc.info/?l=bugtraq&m=108034226717745&w=2  View
70999 10292 CVE-2004-1865 BID:13397  View
71000 10292 CVE-2004-1865 URL:http://www.securityfocus.com/bid/13397  View
71001 10292 CVE-2004-1865 OSVDB:10510  View
71002 10292 CVE-2004-1865 URL:http://www.osvdb.org/10510  View
71003 10292 CVE-2004-1865 SECTRACK:1009564  View
71004 10292 CVE-2004-1865 URL:http://securitytracker.com/id?1009564  View
71005 10292 CVE-2004-1865 XF:bblog-name-xss(15635)  View

Related JVN