9 lines
No EOL
596 B
Text
9 lines
No EOL
596 B
Text
source: https://www.securityfocus.com/bid/10885/info
|
|
|
|
PluggedOut Blog is reported prone to a cross-site scripting vulnerability.
|
|
|
|
This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would occur in the security context of the site hosting the vulnerable software.
|
|
|
|
Exploitation could allow for theft of cookie-based authentication credentials. Other attacks are also possible.
|
|
|
|
http://www.example.com/blog/blog_exec.php?action=remove_blog&blogid=<script>alert(document.cookie);</script> |