Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".
Max CVSS
5.0
EPSS Score
1.85%
Published
2006-02-21
Updated
2018-10-18
1 vulnerabilities found