CVE-2005-3264

CVE-2005-3264

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://irannetjob.com/content/view/141/28/http://marc.info/?l=bugtraq&m=112907042504220&w=2 http://secunia.com/advisories/17175/http://www.securityfocus.com/bid/15078