Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 body parameter to action.php and the 2 amount and 3 action parameters to admin/index.php...

CVE-2010-4749

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 body parameter to action.php and the 2 amount and 3 action parameters to admin/index.php...

CVE-2010-4749

CVE-2010-4749 concerns BLOG:CMS 4.2.1.e (and possibly earlier) with multiple XSS flaws caused by improper input sanitization. The root causes are (1) the body parameter in action.php and (2) the amount and (3) the action parameters in admin/index.php, allowing remote attackers to inject arbitrary...

CVE-2010-4750

CVE-2010-4750 describes a CSRF vulnerability in BLOG:CMS (admin/libs/ADMIN.php) that allows a logged-in administrator’s credentials to be hijacked via forged requests, potentially enabling credential changes. The related HTB advisory expands this to CSRF alongside XSS/Script-insertion issues in B...

CVE-2010-4750

Cross-site request forgery CSRF vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators...

HTB22797: Path disclousure in BLOG:CMS

Vulnerability ID: HTB22797 Reference: http://www.htbridge.ch/advisory/pathdisclousureinblogcms.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.f and probably prior versions Vendor Notification: 13 January 2011 Vulnerability Type: Path disclousure Status: N...

BLOG:CMS 4.2.1.f Path Disclosure

Vulnerability ID: HTB22797 Reference: http://www.htbridge.ch/advisory/pathdisclousureinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.f and probably prior versions Vendor Notification: 13 January 2011 Vulnerability Type: Path disclousure Status: N...

BLOG:CMS <= v4.2.1e Multiple Vulnerabilities

Exploit for php platform in category web applications Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery Status: Not Fixed, Vendor Alerted Risk...

Blog:CMS 4.2.1e - Multiple Vulnerabilities

Blog:CMS 4.2.1e - Multiple Vulnerabilities Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010...

BLOG:CMS 4.2.1e Cross Site Request Forgery / Cross Site Scripting

Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

Blog:CMS 4.2.1 e - Multiple HTML Injections Cross-Site Scripting

Blog:CMS 4.2.1 e - Multiple HTML Injections Cross-Site Scripting source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in...

cross site scripting vulnerability in BLOG:CMS

Vulnerability ID: HTB22726 Reference: http://www.htbridge.ch/advisory/crosssitescriptingvulnerabilityinblogcms.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: XSS Cross...

XSS vulnerability in BLOG:CMS

Vulnerability ID: HTB22725 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogcms1.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: XSS Cross Site Scriptin...

XSRF &#40;CSRF&#41; in BLOG:CMS

Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

XSS vulnerability in BLOG:CMS

Vulnerability ID: HTB22724 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogcms.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: Stored XSS Cross Site...

Blog:CMS 4.2.1e - Multiple Vulnerabilities

Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

Blog:CMS 4.2.1 e - Multiple HTML Injections / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45432/info BLOG:CMS is prone to a cross-site-scripting vulnerability and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Successful exploits will allow...

Multiple Vulnerabilities in BLOG:CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in BLOG:CMS which could be exploited to perform cross-site scripting, script insertion and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in BLOG:CMS: CVE-2010-4749 1.1 The...

CVE-2008-0450

Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the 1 DIRPLUGINS parameter to a index.php, and the 2 DIRLIBS parameter to b media.php and c xmlrpc/server.php in admin/...