CVE-2008-0424

SQL injection vulnerability in blog.php in Mooseguy Blog System MGBS 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter...

CVE-2008-0424

The CVE-2008-0424 entry concerns Mooseguy Blog System (MGBS) 1.0. The vulnerability is a SQL injection in blog.php caused by input via the month parameter, enabling remote attackers to execute arbitrary SQL commands. Affected software is MGBS 1.0; the exact root cause is an unsafely handled month...

CVE-2008-0424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in Mooseguy Blog System MGBS 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter...

Mooseguy Blog System 1.0 (blog.php month) SQL Injection Vulnerability

No description provided by source. MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN";...

Mooseguy Blog System 1.0 - month SQL Injection

Mooseguy Blog System 1.0 - month SQL Injection MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUER...

Mooseguy Blog System 1.0 (blog.php month) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Mooseguy Blog System 1.0 blog.php month SQL Injection Vulnerability ===================================================================== MGBS 1.0 Remote SQL injection...

Oblog blog system vulnerabilities and use(eat)-vulnerability warning-the black bar safety net

Vulnerabilities platform: the Oblog blog system Platform version: The through eat Vulnerability name: password retrieve Harm degree:★★★☆☆ Oblog blog system password retrieve function there is a serious design bug. Using this vulnerability, intruders can be through your own structure form changes...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

Blog System 1.x - index.php?news_id SQL Injection

Blog System 1.x - index.php?newsid SQL Injection --==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHO...

Blog System 1.x (index.php news_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================================== Blog System 1.x index.php newsid Remote SQL Injection Vulnerability ======================================================================...

Blog System 1.x - 'index.php?news_id' SQL Injection

--==+================================================================================+==-- --==+ BlogSite Professional SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog SITE: N/A DORK:...

blog12SQL.txt

Blog System v1.2 http://www.netartmedia.net/blogsystem/ is vulnerable to 2 SQL injection vulnerabilities for failure to correctly sanitize SQL parameters. http://HOST/index.php?mode=home&cat=-99SQL CODE http://HOST/blog.php?user=USER&note=-99SQL CODE...

CVE-2005-4049

Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the cat parameter in index.php and 2 the note parameter in blog.php...

CVE-2005-4049

Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the cat parameter in index.php and 2 the note parameter in blog.php...

CVE-2005-4049

Blog System 1.2 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through (1) the cat parameter in index.php and (2) the note parameter in blog.php. The CVE entry reports these flaws and the NVD assessment indicates a high impact with ne...

CVE-2005-4049: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via 1 the cat parameter in index.php and 2 the note parameter in blog.php...

Blog System v1.2 Multiple SQL Injection Vulnerabilities

Blog System v1.2 http://www.netartmedia.net/blogsystem/ is vulnerable to 2 SQL injection vulnerabilities for failure to correctly sanitize SQL parameters. http://HOST/index.php?mode=home&cat=-99SQL CODE http://HOST/blog.php?user=USER&note=-99SQL CODE...

Blog System v1.2 SQL inj. vuln.

Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...