Vulnerabilities > Atom > Photoblog

DATE CVE VULNERABILITY TITLE RISK
2007-06-08 CVE-2007-3135 Input Validation vulnerability in Atom PhotoBlog AtomPhotoBlog.PHP
Cross-site scripting (XSS) vulnerability in atomPhotoBlog.php in Atom Photoblog 1.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tag parameter.
network
atom
4.3
2007-06-08 CVE-2007-3134 Cross-Site Scripting vulnerability in Photoblog
Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Your Name, (2) Your Homepage, and (3) Your Comment fields, when using "Approve Comments."
network
atom
4.3