52 matches found
BirdBlog 1.x - 'index.php?page' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...
BirdBlog 1.x - 'user.php?uid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...
BirdBlog 1.x - user.php?uid Cross-Site Scripting
BirdBlog 1.x - user.php?uid Cross-Site Scripting source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary scri...
BirdBlog 1.x - comment.php?entryid Cross-Site Scripting
BirdBlog 1.x - comment.php?entryid Cross-Site Scripting source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitra...
BirdBlog 1.x - 'comment.php?entryid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/20202/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...
CVE-2005-1592
Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript...
CVE-2005-1592
CVE-2005-1592 affects BirdBlog versions before 1.3.1, where multiple javascript vulnerabilities in BBCode allow remote attackers to inject arbitrary JavaScript. The issue is documented across multiple feeds (NVD/Red Hat/CVE) with the same description. No exploit details are provided in the connec...
CVE-2005-1592
Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript...
[SA15206] BirdBlog BB Code Script Insertion Vulnerability
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: BirdBlog BB Code Script Insertion Vulnerability SECUNI...
CVE-2005-0882
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the 1 userid or 2 userpw parameters...
CVE-2005-0882
CVE-2005-0882 describes a SQL injection vulnerability in BirdBlog’s admincore.php prior to version 1.2.0, where remote attackers can execute arbitrary SQL commands through the (1) userid or (2) userpw parameters. The underlying issue is unsafe handling/concatenation of user input, enabling partia...