New eVuln Advisory: microBlog BBCode XSS Vulnerability http://evuln.com/vulns/36/summary/bt/ --------------------Summary---------------- Software: microBlog Sowtware's Web Site: http://www.stamcar.com/projekti/microblog/ Versions: 2.0 RC-10 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) eVuln ID: EV0036 -----------------Description--------------- Arbitrary script code insertion is possible in BBcode [url] tag. Vulnerable Script: functions.php [url] tag isn't properly sanitized. This can be used to post arbitrary script code. --------------Exploit---------------------- Available at: http://evuln.com/vulns/36/exploit/bt/ --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
