CVE-2002-1464

Description

Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable.

Affected products

• cafelog / b22.6pre4 – 2.6pre4

References

• MISChttp://archives.neohapsis.com/archives/vulnwatch/2002-q3/0071.html
• MISChttp://online.securityfocus.com/archive/1/287228
• MISChttp://www.iss.net/security_center/static/9835.php
• MISChttp://www.securityfocus.com/bid/5455