Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter.Referenceshttp://marc.info/?l=bugtraq&m=111928552304897&w=2http://www.vupen.com/english/advisories/2005/0818http://echo.or.id/adv/adv18-theday-2005.txthttp://www.securityfocus.com/bid/13994