8338 matches found
Blog Torrent 0.8 - Directory Traversal
source: https://www.securityfocus.com/bid/11795/info It is reported that Blog Torrent is prone to a remote directory traversal vulnerability. This issue is due to a failure of the server process to properly filter user supplied input. Blog Torrent preview 0.8 version is affected by this...
WordPress Blog HTTP Splitting Vulnerability
No description provided by source. This script is C Tenable Network Security ifdescription scriptid15443; scriptbugtraqid11348; scriptversion "$Revision: 1.1 $"; name"english" = "WordPress HTTP Splitting Vulnerability"; scriptnameenglish:name"english"; desc"english" = " The remote host is running...
[SA12729] My Blog Unspecified Cross-Site Scripting Vulnerabilities
TITLE: My Blog Unspecified Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA12729 VERIFY ADVISORY: http://secunia.com/advisories/12729/ CRITICAL: Less critical IMPACT: Unknown, Cross Site Scripting WHERE: From remote SOFTWARE: My Blog 1.x http://secunia.com/product/4001/ DESCRIPTION:...
[Full-Disclosure] Code Injection Vulnerability in pLog
I believe I have discovered a vulnerability in the open source blog software known as pLog. Register.php doesn't seem to check for script tags in the username or blog name fields in the account sign up form. This allows injection of potentially malicious code into the page. Since the names of blo...
Serendipity <= 1.0-beta2 Blog Configuration PHP Code Injection
Binary data 3518.prm...
PluggedOut Blog 1.511.60 - Blog_Exec.php Cross-Site Scripting
PluggedOut Blog 1.511.60 - BlogExec.php Cross-Site Scripting source: https://www.securityfocus.com/bid/10885/info PluggedOut Blog is reported prone to a cross-site scripting vulnerability. This could allow for execution of hostile HTML and script code in the web client of a user who visits a...
PluggedOut Blog 1.51/1.60 - 'Blog_Exec.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/10885/info PluggedOut Blog is reported prone to a cross-site scripting vulnerability. This could allow for execution of hostile HTML and script code in the web client of a user who visits a malicious link to the vulnerable site. This code execution would...
Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion
Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be...
bblog 0.7.2 cross site scripting
Introduction: Bblog, a blogging system scripted in PHP does not perform sufficient filtering when submitting a blog name. The severity of this flaw however, is low as the required privileges to access the administration panel for bblog is superuser. The problem: The flaw lies in...
Web Blog 1.1 Remote Execute Commands Bug
Product: Web Blog 1.1 Remote Execute Commands Bug Affected Versions: 1.1.5 Bug: Command Remote Execution Credits: n3rd - Lit Security Solutions LiSS Affix in irc.brasnet.org Vendor: http://leifwright.com Exploiting:...
Leif Wright Web Blog blog.cgi ViewFile Request file Parameter Arbitrary Command Execution
The remote host is running LeifWright's blog.cgi - a CGI designed to handle personal web logs or 'blogs'. There is a bug in this software that could allow an attacker to execute arbitrary commands on the remote web server with the privileges of the web user. %NASLMINLEVEL 70300 C Tenable Network...
webBlog11.txt
Product: Web Blog 1.1 Remote Execute Commands Bug Affected Versions: 1.1.5 Bug: Command Remote Execution Credits: n3rd - Lit Security Solutions LiSS Affix in irc.brasnet.org Vendor: http://leifwright.com Exploiting:...
ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary files retrieving
ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...
ZH2004-01SA.txt
ZH2004-01SA security advisory: Web Blog 1.1 Remote arbitrary files retrieving Published: 28 january 2004 Released: 28 january 2004 Name: Web Blog Affected Systems: 1.1 Issue: Remote file retrieving Author: Zone-h Security Labs Vendor: http://leifwright.com Description Zone-h Security Team has...
CVE-2004-2127
Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. dot dot in the file variable...
Unguarded calls to __toString() when nesting an object into an array
More info at https://symfony.com/blog/cve-2024-51754-unguarded-calls-to-tostring-in-a-sandbox-when-an-object-is-in-an-array-or-an-argument-list...
