CVE-2008-6613

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request...

Design/Logic Flaw

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request...

Sql injection

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6611

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6613

CVE-2008-6613 affects minimal-ablog 0.4, where uploader.php fails to properly restrict access. This allows remote attackers to gain administrative privileges via a direct request. The description and linked references confirm the component and impact but do not provide exploit details, affected v...

CVE-2008-6611

CVE-2008-6611 describes a SQL injection in index.php of Minimal ABlog 0.4, exploitable via the id parameter to execute arbitrary SQL commands. The NVD notes a base score of 7.5 (HIGH) with network attack vector and low complexity, no authentication required, affecting confidentiality, integrity, ...

CVE-2009-0406

CVE-2009-0406 affects Community CMS 0.4 and earlier. The vulnerability is an SQL injection in index.php via the id parameter that allows remote attackers to execute arbitrary SQL commands. Impact is described as partial confidentiality, integrity, and availability. CVSSv2 base score is 7.5 (HIGH)...

Directory traversal

Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a viewEntry action...

CVE-2008-6012

Directory traversal vulnerability in index.php in Pritlog 0.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter in a viewEntry action...

Design/Logic Flaw

PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors...

CVE-2008-5673

PHParanoid before 0.4 does not properly restrict access to the members area by unauthenticated users, which has unknown impact and remote attack vectors...

minimalablog-sqlfubypass.txt

=========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendor : http://www.abweb.co.cc/ Download :...

Minimal Ablog 0.4 (SQL/FU/Bypass) Multiple Remote Vulnerabilities

No description provided by source. =========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendor : http://www.abweb.co.cc/ Download :...

minimal ablog 0.4 - SQL Injection Arbitrary File Upload Authentication Bypass

minimal ablog 0.4 - SQL Injection Arbitrary File Upload Authentication Bypass =========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendo...

Minimal Ablog 0.4 (SQL/FU/Bypass) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= Minimal Ablog 0.4 SQL/FU/Bypass Multiple Remote Vulnerabilities =================================================================...

minimal ablog 0.4 - SQL Injection / Arbitrary File Upload / Authentication Bypass

=========================================================================================================== o minimal-ablog 0.4 SQL Injection, File Upload and Admin Bypass Vuln Software : minimal-ablog version 0.4 Vendor : http://www.abweb.co.cc/ Download :...

CVE-2008-5195

CVE-2008-5195: Multiple SQL injection vulnerabilities in SebracCMS (sbcms) 0.4 allow remote attackers to execute arbitrary SQL via (1) recid in cms/form/read.php and (2) uname in cms/index.php, among other vectors. Base score 7.5 (HIGH); impact partial confidentiality/integrity/availability. The ...

Arbitrary file deletion

updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.updatejail temporary file...

CVE-2008-5139

updatejail in jailer 0.4 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.updatejail temporary file...

CVE-2008-5139

CVE-2008-5139 affects the jailer component (updatejail) of the chroot maintenance tool Jailer. The vulnerability arises from generation of a predictable temporary filename, allowing local users to perform a symlink attack on a file like /tmp/#####.updatejail and overwrite arbitrary files, potenti...