CVE-2006-0310

Cross-site scripting XSS vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag...

Sql injection

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-0311

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-0311

CVE-2006-0311 is an SQL injection in aoblogger 2.3, exposed via login.php and the username parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Reported impact aligns with CVSS base metrics (7.5: High; network vector, low complexity, no authentication). Affected...

CVE-2006-0311

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-0312

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1...

CVE-2006-0312

CVE-2006-0312 affects aoblogger 2.3. A flaw in create.php allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1. The root cause is an authentication bypass in the creation flow, enabling unauthorized post creation. Affected component: creat...

[eVuln] aoblogger Multiple Vulnerabilities

New eVuln Advisory: aoblogger Multiple Vulnerabilities http://evuln.com/vulns/37/summary/bt/ --------------------Summary---------------- Software: aoblogger Sowtware's Web Site: http://mikeheltonisawesome.com/ Versions: 2.3 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote...

PT-2006-1384 · Aoblogger · Aoblogger

Name of the Vulnerable Software and Affected Versions: aoblogger version 2.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter in the "login.php" file. Recommendations: For aoblogger version 2.3, consider restricting acce...

aoblogger 2.3 - 'create.php' Entry Creation

source: https://www.securityfocus.com/bid/16286/info AOblogger is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could allow an attacker to: -...

CVE-2005-4630

SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 billshowid, 2 billdetailid, 3 fuse, and 4 frmClientID parameters...

CVE-2005-4500

SQL injection vulnerability in MusicBox 2.3 allows remote attackers to execute arbitrary SQL commands via the 1 show and 2 type parameter. NOTE: the provenance of this information is unknown, although it was later rediscovered...

CVE-2005-4500

MusicBox 2.3 is affected by CVE-2005-4500 due to an SQL injection in the show and type parameters, enabling remote attackers to execute arbitrary SQL commands. The connected sources confirm the vulnerability and its parameters, but do not provide remediation details in these documents.

CVE-2005-4490

Multiple cross-site scripting XSS vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 keyword and 2 invalid parameter to articleSearch.asp; 3 username and 4 invalid parameter to lostPassword.asp; 5 Username, 6 Password, and 7 invalid...

CVE-2005-4490

CVE-2005-4490 affects SCOOP! 2.3 and earlier, with multiple XSS vulnerabilities. An attacker can inject arbitrary script/HTML via parameters to articleSearch.asp (keyword, invalid parameter); lostPassword.asp (username, invalid parameter); account_login.asp (Username, Password, invalid parameter)...

MusicBox 2.3 - type SQL Injection

MusicBox 2.3 - type SQL Injection source: https://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit...

MusicBox 2.3 - 'type' SQL Injection

source: https://www.securityfocus.com/bid/16030/info MusicBox is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilities in the underlying database...

Commercial Interactive Media SCOOP! 2.3 - account_login.asp Multiple Cross-Site Scripting Vulnerabilities

Commercial Interactive Media SCOOP! 2.3 - accountlogin.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the...

Commercial Interactive Media SCOOP! 2.3 - category.asp Multiple Cross-Site Scripting Vulnerabilities

Commercial Interactive Media SCOOP! 2.3 - category.asp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the...

Commercial Interactive Media SCOOP! 2.3 - prePurchaserRegistration.asp?Invalid Cross-Site Scripting

Commercial Interactive Media SCOOP! 2.3 - prePurchaserRegistration.asp?Invalid Cross-Site Scripting source: https://www.securityfocus.com/bid/16015/info Commercial Interactive Media SCOOP! is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the...