CVE-2011-1670

This exploit demonstrates an HTML injection vulnerability in InTerra Blog Machine 1.84. It submits a malicious form with a script payload in the 'subject' field, which executes arbitrary JavaScript in the context of the affected site.

This is a proof-of-concept for a stored XSS vulnerability in InTerra Blog Machine 1.84. The exploit demonstrates how arbitrary JavaScript can be executed by injecting a malicious script into the 'subject' parameter via a crafted form submission.