CVE-2006-6020

Description

Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter.

Affected products

• blog_torrent / blog_torrent_preview0.92 – 0.92

References

• MISChttp://www.securityfocus.com/bid/21125
• MISChttp://www.securityfocus.com/archive/1/451856/100/0/threaded
• MISChttp://securityreason.com/securityalert/1895
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/30350