OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Zoomblog HTML Injection Vulnerability

From: RBA (rbaeListas.com)
Date: Mon Nov 07 2005 - 04:34:17 CST


> Zoomblog is prone to HTML injection attacks. It is possible for a
> malicious Zoomblog user to inject hostile HTML and script code into
> the commentary via form fields.

This bug was corrected on Nov.4th.

Also, the "Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability"
was corrected on Nov.5th.

Regards,
Rogelio
http://www.zoomblog.com/