CVE-2008-0676

CVE-2008-0676 describes a Cross-site Scripting (XSS) vulnerability in the search.php component of A-Blog 2. The flaw allows remote attackers to inject arbitrary web script or HTML via the words parameter, enabling potential credential theft or session manipulation through crafted search queries. ...

A-Blog V.2 (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH &...

ablog-sqlxss.txt

!/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://heanet.dl.sourceforge.net/sourceforge/a-blog/A-BlogV2.rar XSS Address...

A-Blog V.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================== A-Blog V.2 id XSS / Remote SQL Injection Exploit ================================================== !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTH...

A-Blog 2.0 - Cross-Site Scripting SQL Injection

A-Blog 2.0 - Cross-Site Scripting SQL Injection !/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

A-Blog 2.0 - Cross-Site Scripting / SQL Injection

!/usr/bin/perl A-Blog V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://heanet.dl.sourceforge.net/sourceforge/a-blog/A-BlogV2.rar XSS Address...

CVE-2006-6729

Cross-site scripting XSS vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6729

Cross-site scripting XSS vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

[SA23444] a-blog Cross-Site Scripting Vulnerability

TITLE: a-blog Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA23444 VERIFY ADVISORY: http://secunia.com/advisories/23444/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: a-blog 1.x http://secunia.com/product/12949/ DESCRIPTION: Fukumori has reported a...

A-Blog 1.0 - Cross-Site Scripting

A-Blog 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/21716/info The 'a-blog' application is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script cod...

A-Blog 1.0 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/21716/info The 'a-blog' application is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

JVN#78520316 a-blog cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected a-blog 1.51 and earlier...

CVE-2006-5135

Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...

A-Blog.txt

1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...

CVE-2006-5135

CVE-2006-5135 describes multiple PHP remote file inclusion vulnerabilities in A-Blog 2. An attacker can cause arbitrary PHP code execution by supplying a URL in parameters such as navigation_start, navigation_middle, and open_box/middle_box/close_box in sources/myaccount.php, navigation_end in na...

CVE-2006-5135

Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the 1 openbox, 2 middlebox, and 3 closebox parameters in a sources/myaccount.php; the 4 navigationend parameter in b navigation/search.php and c navigation/donation.php...

EUVD-2006-5077

PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigationstart parameter...

CVE-2006-5092

CVE-2006-5092 and related CVEs describe PHP remote file inclusion (RFI) vulnerabilities in A-Blog 2. CVE-2006-5092 affects navigation/menu.php, allowing an attacker to trigger code execution by supplying a URL in the navigation_start parameter. CVE-2006-5135 expands to multiple RFI vectors across...

A-Blog v2.0 Remote File Include

============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous A-Blog...

A-Blog 2.0 - Multiple Remote File Inclusions

A-Blog 2.0 - Multiple Remote File Inclusions ============================================================================================== A-Blog v2.0 Remote File Include =============================================================================================== Critical Level : Dangerous...