27 matches found
CVE-2007-1445
CVE-2007-1445 affects BP Blog 7.0–7.0.2. The vulnerability is in the heme preview feature of default.asp, where an attacker can inject SQL through the layout parameter, enabling arbitrary SQL commands on the backend. The CVSS-derived context from the NVD indicates a network-accessible, low-attack...
BP Blog 7.0 (default.asp layout) Remote SQL Injection Vulnerability
No description provided by source. BeyazKurt Script : BP Blog D0rk : "Powered by BP Blog 7.0" thnx : Forever.slam and all WorldHackerz Team! WorldHackerz Mirr0r'da Taht Bizimdir h := ------- Exploit :...
BP Blog 7.0 - layout SQL Injection
BP Blog 7.0 - layout SQL Injection BeyazKurt Script : BP Blog D0rk : "Powered by BP Blog 7.0" thnx : Forever.slam and all WorldHackerz Team! WorldHackerz Mirr0r'da Taht Bizimdir h := ------- Exploit :...
BP Blog 7.0 (default.asp layout) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== BP Blog 7.0 default.asp layout Remote SQL Injection Vulnerability =================================================================== Script : BP Blog D0rk : "Powered by B...
BP Blog 7.0 - 'layout' SQL Injection
BeyazKurt Script : BP Blog D0rk : "Powered by BP Blog 7.0" thnx : Forever.slam and all WorldHackerz Team! WorldHackerz Mirr0r'da Taht Bizimdir h := ------- Exploit :...
CVE-2005-0854
The CVE-2005-0854 entry concerns betaparticle blog (bp blog) prior to version 4. It reports an authentication bypass that enables remote attackers to perform file operations via direct requests to upload.asp or myFiles.asp (upload and delete respectively). The vulnerability allows unauthorized ac...
CVE-2005-0853
The CVE-2005-0853 entry concerns betaparticle blog (bp blog) where the database files are stored under the web root, enabling direct access to sensitive data via HTTP requests. Affected files are (1) dbBlogMX.mdb for versions before 3.0, or (2) Blog.mdb for versions 3.0 and later, with vector 2 a...