CVE-2006-1426

Pixel Motion Blog is affected by multiple SQL injection vulnerabilities disclosed for CVE-2006-1426. The issues allow remote attackers to execute arbitrary SQL commands through the date parameter in index.php or bypass authentication via the password parameter in admin/index.php. The NVD entry ci...

CVE-2006-1426

Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...

CVE-2006-1426: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the 1 date parameter in index.php or bypass authentication via the 2 password parameter in admin/index.php...

Sql injection

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

CVE-2006-1333

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

CVE-2006-1333

CVE-2006-1333 affects BetaParticle Blog 6.0 and earlier. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands through the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp. The underly...

CVE-2006-1333

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

CVE-2006-1333: Undefined Security Weakness

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

BetaParticle Blog <= 6.0 (fldGalleryID) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=20 Usage: beta.pl host path googledork: "Powered by bp blog" 9.710 pages.. use...

BetaParticle Blog <= 6.0 (fldGalleryID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== BetaParticle Blog googledork: "Powered by bp blog" 9.710 pages.. use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print "\n- NukedX Security Advisory...

BetaParticle Blog 6.0 - 'fldGalleryID' SQL Injection

!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=20 Usage: beta.pl googledork: "Powered by bp blog" 9.710 pages.. use IO::Socket; if@ARGV != 2 usage; else exploit; sub...

Directory traversal

Directory traversal vulnerability in install05.php in Simple PHP Blog SPB 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in the bloglanguage parameter, as demonstrated by injecting PHP sequences in...

CVE-2006-1243

Directory traversal vulnerability in install05.php in Simple PHP Blog SPB 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in the bloglanguage parameter, as demonstrated by injecting PHP sequences in...

CVE-2006-1243

Directory traversal vulnerability in install05.php in Simple PHP Blog SPB 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in the bloglanguage parameter, as demonstrated by injecting PHP sequences in...

CVE-2006-1243

CVE-2006-1243 affects Simple PHP Blog (SPB) up to version 0.4.7.1, via install05.php. The vulnerability is a local file inclusion triggered by improper handling of the blog_language parameter, allowing directory traversal and a NUL character to force inclusion of arbitrary local files (demonstrat...

Simple PHP Blog < 0.4.7.2 install05.php Local File Inclusion

Binary data 3476.prm...

Simple PHP Blog install05.php blog_language Parameter Local File Inclusion

The version of Simple PHP Blog installed on the remote host fails to sanitize input to the 'bloglanguage' parameter of the 'install05.php' script before using it in a PHP 'requireonce' function. An unauthenticated attacker may be able to exploit this issue to view arbitrary files or to execute...

CVE-2006-1243: Undefined Security Weakness

Directory traversal vulnerability in install05.php in Simple PHP Blog SPB 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in the bloglanguage parameter, as demonstrated by injecting PHP sequences in...

Simple PHP Blog 0.4.7.1 - Remote Command Execution

Simple PHP Blog 0.4.7.1 - Remote Command Execution !/usr/bin/perl use IO::Socket; print "Simple PHP Blog this works with magicquotesgpc = Off\r\n\r\n"; short explaination: we have this code in install05.php: ... script is not deleted after installation, so, if magicquotesgpc = Off, you can includ...

Simple PHP Blog <= 0.4.7.1 Remote Command Execution Exploit

Exploit for unknown platform in category web applications =========================================================== Simple PHP Blog this works with magicquotesgpc = Off\r\n\r\n"; short explaination: we have this code in install05.php: ... script is not deleted after installation, so, if...