Cross site scripting

Cross-site scripting XSS vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to inject arbitrary web script or HTML via the CategoryID parameter in a refer action...

Directory traversal

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

Sql injection

SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...

CVE-2009-0338

The CVE-2009-0338 issue targets DMXReady Blog Manager, specifically the inc_webblogmanager.asp component. The vulnerability is a Cross-site Scripting (XSS) flaw that allows an attacker to inject arbitrary web script or HTML via the CategoryID parameter in a refer action. Impact is described as en...

CVE-2009-0325

CVE-2009-0325 affects Ninja Blog 4.8, specifically entries/index.php. The vulnerability is a directory traversal that allows reading arbitrary files by injecting .. into the cat parameter when magic_quotes_gpc is disabled. Public references in NVD and PRION/PT-2009-2988 describe the condition and...

CVE-2009-0339

SQL injection vulnerability in incwebblogmanager.asp in DMXReady Blog Manager allows remote attackers to execute arbitrary SQL commands via the itemID parameter in a view action...

CVE-2009-0325

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

CVE-2009-0339

The CVE-2009-0339 entry concerns a SQL injection in inc_webblogmanager.asp of the DMXReady Blog Manager, exploitable via the itemID parameter in a view action. This vulnerability allows remote attackers to execute arbitrary SQL commands, with potential impact on confidentiality, integrity, and av...

PT-2009-2988 · Ninja · Ninja Blog

Name of the Vulnerable Software and Affected Versions: Ninja Blog version 4.8 Description: The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the entries/index.php file when magic quotes gpc is disabled. This is achieved by using a .. dot dot i...

Chipmunk Blog Add Admin Exploit

0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php \admin\authenticate.php if isset$POST'submit' //...

Chipmunk Blog - (Authentication Bypass) Add Admin

0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php \admin\authenticate.php if isset$POST'submit' //...

Chipmunk Blog - (Authentication Bypass) Add Admin

Chipmunk Blog - Authentication Bypass Add Admin 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php...

Chipmunk Blog (Auth Bypass) Add Admin Exploit

No description provided by source. 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip Vulnerability : Add Admin Exploit\Auth Bypass Author : x0r Contact : [email protected] \ [email protected] Website : NULL 0x02 Bug: \admin\reguser.php...

Chipmunk Blog (Auth Bypass) Add Admin Exploit

Exploit for unknown platform in category web applications ============================================= Chipmunk Blog Auth Bypass Add Admin Exploit ============================================= 0x01 Informations: Script : Chipmunk Blog Download : http://www.chipmunk-scripts.com/blog/blog.zip...

Max Blog 1.0.6 SQL Injection

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail:...

Fedora 9 : tor-0.2.0.33-1.fc9 (2009-0897)

New upstream release 0.2.0.33, with lots of bug fixes and one security fix: https://blog.torproject.org/blog/tor-0.2.0.33-stable-released Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

OwnRS Blog 1.2 - autor.php SQL Injection

OwnRS Blog 1.2 - autor.php SQL Injection OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greet...

OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== OwnRS Blog 1.2 autor.php SQL Injection Vulnerability ====================================================== OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download:...

Onur Blog 2.0 Database Disclosure

--------------------------------------------------------- Portal Name: Onur Blog Version : 2.0 Download : http://aspindir.com/Goster/5483 Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/db/db.mdb...

T-Blog 1.0 Database Disclosure

--------------------------------------------------------- Portal Name: T-blog Version : 1.0 Download : http://aspindir.com/Goster/5473 Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD: http://site.com/Path/blog.mdb...