267 matches found
CVE-2019-6034
The CVE-2019-6034 issue exists in a-blog cms prior to versions 2.10.23 (2.10.x), 2.9.26 (2.9.x), and 2.8.64 (2.8.x). It enables arbitrary scripts to be executed in the context of the application due to a script injection flaw (unspecified vectors). Impact is that an arbitrary script may run in th...
appleple a-blog cms cross-site scripting vulnerability (CNVD-2020-02706)
appleple a-blog cms is a content management system CMS from appleple Japan. A cross-site scripting vulnerability exists in appleple a-blog cms versions 2.10.x before 2.10.23, 2.9.x before 2.9.26, and 2.8.x before 2.8.64. The vulnerability stems from a lack of proper validation of client-side data...
JVN#10377257: Multiple vulnerabilities in a-blog cms
a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2019-6033 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3...
CVE-2016-1178
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors...
CVE-2016-1179
Cross-site scripting XSS vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML...
CVE-2016-1178
The CVE-2016-1178 issue affects appleple a-blog cms up to version 2.6.0.1, where a flaw in the session management of the comment feature allows remote attackers to obtain or modify sensitive data. Related sources describe concrete impacts: an unauthenticated attacker could delete arbitrary commen...
CVE-2016-1179
The CVE-2016-1179 issue affects appleple a-blog cms (2.6.0.1 and earlier). The vulnerability is a Cross-site Scripting (XSS) in the standard template of the comment functionality, allowing an attacker to inject arbitrary script/HTML into user browsers. Affected component: the comment template in ...
CVE-2016-1179
Cross-site scripting XSS vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML...
CVE-2016-1178
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors...
appleple a-blog cms cross-site scripting vulnerability
appleple a-blog cms is a content management system CMS from appleple Japan. A cross-site scripting vulnerability exists in appleple a-blog cms 2.6.0.1 and earlier versions. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...
a-blog cms vulnerable to cross-site scripting
Overview a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a cross-site scripting vulnerability in the standard template of the comment functionality. Yuya Yoshida of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...
a-blog cms vulnerable to session management
Overview a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a vulnerability in session management of the comment functionality. Yuya Yoshida of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...
JVN#03975805: a-blog cms vulnerable to session management
a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a vulnerability in session management of the comment functionality. Impact An arbitrary comment posted may be deleted or a commenter's e-mail address may be obtained by an unauthenticated remote attacker...
JVN#73166466: a-blog cms vulnerable to cross-site scripting
a-blog cms provided by appleple Inc. is a content management system CMS. a-blog cms contains a cross-site scripting vulnerability in the standard template of the comment functionality. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the Patch Apply the patch...
A-Blog 2 - (id) XSS / Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...
A-Blog 2.0 - (menu.php) Remote File Include Vulnerability
No description provided by source. ToXiC A-Blog Remote File Include BuG FounD by Drago84 Application Affect:A-Blog Source Code: http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: ?php include $navigationstart; ? ?php include$navigationmiddle; ? Soluction: Include in page...
A-Blog 2.0 - Multiple Remote File Include Vulnerabilities
No description provided by source. ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...
A-Blog 1.0 Unspecified Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21716/info The 'a-blog' application is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script cod...
