94 matches found
Blog:CMS 4.1.3 - 'NP_UserSharing.php' Remote File Inclusion
BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...
BLOG:CMS <= 4.1.3 (NP_UserSharing.php) Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== BLOG:CMS = 4.1.3 NPUserSharing.php Remote Inclusion Vulnerability ===================================================================== BLOG:CMS Remote file include...
BLOG:CMS <= 4.1.3 (NP_UserSharing.php) Remote Inclusion Vulnerability
No description provided by source. BLOG:CMS Remote file include Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] global $DIRADMIN; include...
NucleusCMS/Blog:CMS/PunBB未明远程文件包含漏洞
CMS/Blog:CMS/PunBB是基于WEB的BLOG系统和论坛系统。CMS/Blog:CMS/PunBB对用户提交的URI参数缺少充分过滤，远程攻击者可以利用这个漏洞以WEB进程权限在系统上执行任意命令。目前没有详细漏洞细节提供 PunBB PunBB 1.0-1.1.4/Nucleus CMS 3.0-3.0 RC/BLOG:CMS 3.0-3.1.3 厂商补丁：BLOG:CMS--------目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：BLOG:CMS Upgrade BLOG:CMS...
CVE-2006-6035
Cross-site scripting XSS vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the FADDR parameter...
CVE-2006-6035
Cross-site scripting XSS vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the FADDR parameter...
CVE-2006-6035
Vulnerability summary: XSS in BLOG:CMS 4.1.3 and earlier via the FADDR parameter in list.php. An attacker can inject arbitrary script/HTML, enabling script execution in victims’ contexts. Affected: BLOG:CMS 4.1.3 and earlier; root cause: inadequate input handling for FADDR. Impact: XSS potential;...
BLOG:CMS <= 4.1.3 XSS
Version: 4.1.3 and prior ----------------------------- Proof of Concept ---------------- http://host/path/list.php?FADDR="scriptalert"XSS";/script katatafish at hush dot com...
Blog:CMS List.PHP 跨网站脚本漏洞
No description provided by source...
Blog:CMS 4.1.3 - list.php Cross-Site Scripting
Blog:CMS 4.1.3 - list.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21173/info BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
CVE-2006-4748
Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...
CVE-2006-4748
Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the 1 xagent, 2 xpath, 3 xreferer, and 4 xdns parameters in a admin/plugins/NPLog.php, and the 5 pitem parameter in b admin/plugins/NPPoll.php; and allow remote authenticated...
CVE-2006-4748
CVE-2006-4748 affects F-ART BLOG:CMS 4.1. Multiple SQL injection vulnerabilities exist in the admin area: parameters (1) xagent, (2) xpath, (3) xreferer, (4) xdns in NP_Log.php; (5) pitem in NP_Poll.php; and (6) pageRef in NP_Referrer.php. These allow remote SQL command execution via the cited pa...
Blog:CMS 4.1 - Dir_Plugins Multiple Remote File Inclusions
Blog:CMS 4.1 - DirPlugins Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/19577/info Blog:CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary...
Blog:CMS 4.1 - 'Dir_Plugins' Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/19577/info Blog:CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it i...
[MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure
MajorSecurity 23 BLOG:CMS = 4.0.0j - XSS and cookie disclosure ------------------------------------------------------------------- Software: BLOG:CMS Version: 4.0.0j Type: Cross site scripting Made public: July, 22th 2006 Vendor: F-ART AGENCY, Ltd. - Radek Hulбn Page: http://blogcms.com/ Credits:...
blog-cms410.txt
BLOG:CMS 4.1.0 http://blogcms.com ------------- SQL injection ------------- http://target.xx/?1'SQL http://target.xx/?item='SQL http://target.xx/?blog='SQL http://target.xx/?member='SQL http://target.xx/?typeface=1'SQL http://target.xx/?results='SQL http://target.xx/?DokuWiki='SQL...
CVE-2006-3364
SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3364
SQL injection vulnerability in index.php in the NPSEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3364
The CVE-2006-3364 entry describes an SQL injection in BLOG:CMS NP_SEO plugin (affected prior to version 4.1.0) where the id parameter in index.php can be exploited to execute arbitrary SQL commands. The vulnerability, originating from improper input handling in the plugin, allows remote attackers...