PDA

Bekijk Volledige Versie : myBloggie <= 2.1.3 XSS



zerogue@gmail.com
06/05/06, 20:00
myBloggie <= 2.1.3 XSS

Discovered by: Nomenumbra
Date: 6/4/2006
impact:moderate (privilege escalation,possible defacement)

MyBloggie versions 2.1.3 and below are vulnerable to XSS injection in the
image BBcode as follows:

javascript:alert('xss')

Nomenumbra/[0x4F4C]