CVE

Id
12704  
CVE No.
CVE-2005-1498  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3) month_no, or (4) post_id parameter in index.php, which are not properly sanitized before they are displayed in an error message. NOTE: issues 2, 3, and 4 may be due to a problem in associated products rather than myBloggie itself.  
Phase
Assigned (20050511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
91506 12704 CVE-2005-1498 BUGTRAQ:20050505 Multiple vulnerabilities in myBloggie 2.1.1  View
91507 12704 CVE-2005-1498 URL:http://marc.info/?l=bugtraq&m=111531904608224&w=2  View
91508 12704 CVE-2005-1498 MISC:http://mywebland.com/forums/viewtopic.php?t=180  View
91509 12704 CVE-2005-1498 BID:13507  View
91510 12704 CVE-2005-1498 URL:http://www.securityfocus.com/bid/13507  View
91511 12704 CVE-2005-1498 XF:mybloggie-viewmodephp-xss(20434)  View
91512 12704 CVE-2005-1498 URL:http://xforce.iss.net/xforce/xfdb/20434  View
91513 12704 CVE-2005-1498 XF:mybloggie-script-injection(20436)  View

Related JVN