The remote host contains a PHP script that is vulnerable to cross-site scripting attacks. Description : The remote host appears to be running ZeroBlog. A vulnerability was identified in Zeroblog, which may be exploited by remote attackers to inject script code. ZeroBlog does not properly sanitize user input in the 'threadID', 'replyID' and 'albumID' parameters.

Unknown at this time.