Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Almokann3

Pesquisador deLEZR.COM
#40297de 53,638
6.8CVSS total
Vulnerabilidades · 1
PT-2006-2877
6.8
2006-04-20
A Blog · A-Blog · CVE-2006-1893
**Name of the Vulnerable Software and Affected Versions** ar-blog version 5.2 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `id` parameter in the "print.php" file. **Recommendations** For ar-blog version 5.2, avoid using the `id` parameter in the print.php file until a patch is available. As a temporary workaround, consider validating and sanitizing user input for the `id` parameter to prevent malicious script injection.