← back
CVE-2010-3025

CVE-2010-3025

EPSS 1.3%
Multiple cross-site scripting (XSS) vulnerabilities in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) excerpt parameter to application/modules/admin/controllers/posts.php, as reachable by admin/posts/edit; and the (2) content parameter to application/modules/admin/controllers/pages.php, as reachable by admin/posts/edit.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.org/1008-exploits/openblog-xssxsrf.txthttp://secunia.com/advisories/40876https://exchange.xforce.ibmcloud.com/vulnerabilities/60942http://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog_1.htmlhttp://www.htbridge.ch/advisory/xss_vulnerability_in_open_blog.htmlhttp://www.securityfocus.com/archive/1/512895/100/0/threadedhttp://www.securityfocus.com/archive/1/512901/100/0/threadedhttp://www.securityfocus.com/bid/42255