PT-2019-17958

Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.10.23 a-blog cms versions prior to 2.9.26 a-blog cms versions prior to 2.8.64 Description The issue allows arbitrary scripts to be executed in the context of the application due to unspecified vectors...

PT-2019-17957

Name of the Vulnerable Software and Affected Versions a-blog cms versions prior to 2.10.23 a-blog cms versions prior to 2.9.26 a-blog cms versions prior to 2.8.64 Description The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, which can lead to...

appleple a-blog cms cross-site scripting vulnerability (CNVD-2020-02706)

appleple a-blog cms is a content management system CMS from appleple Japan. A cross-site scripting vulnerability exists in appleple a-blog cms versions 2.10.x before 2.10.23, 2.9.x before 2.9.26, and 2.8.x before 2.8.64. The vulnerability stems from a lack of proper validation of client-side data...

JVN#10377257: Multiple vulnerabilities in a-blog cms

a-blog cms provided by appleple inc. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2019-6033 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2| AV:N/AC:M/Au:N/C:N/I:P/A:N| Base Score: 4.3...

Fantastic Blog CMS 1.0 - id SQL Injection

Fantastic Blog CMS 1.0 - id SQL Injection Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link:...

Fantastic Blog CMS 1.0 - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link:...

Fantastic Blog CMS 1.0 - 'id' SQL Injection

Exploit Title: Fantastic Blog CMS 1.0 - 'id' SQL Injection Dork: N/A Date: 2018-11-01 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/ronald-ronniem/ Software Link: https://www.sourcecodester.com/sites/default/files/download/Ronald%20Ronnie/fantasticblog0.zip...

News Magazine And Blog CMS 1.0 SQL Injection

Exploit Title: News Magazine & Blog CMS 1.0 - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://geniusocean.com/ Software Link: https://codecanyon.net/item/news-dynamic-newspaper-magazine-and-blog-cms-script/19656143 Demo: http://demo.geniusocean.com/news/ Version: 1.0 Category:...

Responsive Newspaper Magazine&Blog CMS SQL Injection Vulnerability

Responsive Newspaper Magazine&Blog CMS is a content management system mainly used for information websites. A SQL injection vulnerability exists in Responsive Newspaper Magazine&Blog CMS version 1.0. A remote attacker can inject SQL commands by sending the 'id' parameter to the...

Sql injection

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Sql injection

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

Sql injection

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15982

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15983

MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981

CVE-2017-15981 affects the Text/Content CMS “Responsive Newspaper Magazine & Blog CMS 1.0.” The vulnerability is SQL Injection via the id parameter on admin/admin_process.php during form editing. It is confirmed in multiple sources (NVD entry; related advisories and exploit references) and is exp...

CVE-2017-15982

CVE-2017-15982 affects Dynamic News Magazine & Blog CMS 1.0. The vulnerability is an SQL injection via the id parameter to admin/admin_process.php used during form editing, allowing an attacker to inject SQL commands. Multiple sources corroborate the issue across CVE records and public advisories...

CVE-2017-15982: Improper Neutralization of Special Elements used in an SQL Command

Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

CVE-2017-15981: Improper Neutralization of Special Elements used in an SQL Command

Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/adminprocess.php for form editing...

PT-2017-14336

Name of the Vulnerable Software and Affected Versions Responsive Newspaper Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For Responsive Newspaper Magazine & Blog CMS version 1.0, avoid...

PT-2017-14338

Name of the Vulnerable Software and Affected Versions MyMagazine Magazine & Blog CMS version 1.0 Description The issue allows SQL Injection via the id parameter to "admin/admin process.php" for form editing. Recommendations For MyMagazine Magazine & Blog CMS version 1.0, avoid using the id...