BetaParticle blog 2.03.0 - dbBlogMX.mdb Direct Request Database Disclosure

BetaParticle blog 2.03.0 - dbBlogMX.mdb Direct Request Database Disclosure source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficientl...

BetaParticle blog 2.03.0 - myFiles.asp File Manipulation

BetaParticle blog 2.03.0 - myFiles.asp File Manipulation source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the...

BetaParticle blog 2.0/3.0 - 'myFiles.asp' File Manipulation

source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may...

BetaParticle blog 2.0/3.0 - 'upload.asp' Arbitrary File Upload

source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may...

BetaParticle blog 2.0/3.0 - dbBlogMX.mdb Direct Request Database Disclosure

source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the authentication credential database. A remote attacker may...

CVE-2005-0802

CVE-2005-0802 concerns a cross-site scripting (XSS) vulnerability in the search.asp handler of ACS Blog versions 0.8 through 1.1b. The issue allows remote attackers to inject and execute arbitrary web script or HTML via the search parameter, potentially impacting users viewing search results. The...

CVE-2005-0802: Undefined Security Weakness

Cross-site scripting XSS vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute arbitrary web script or HTML via the search parameter...

XSS in ACS blog

XSS vulnerability exist in the ACS blog ASP WEBLOG SYSTEM . Vulnerable : ACS Blog v 0.8 ACS Blog v 0.9 ACS Blog v 1.0 ACS Blog v 1.1b Code : /search.asp?search=223Cbr3E3Ciframe+src3D22http3A2F2Fgoogle.com223E3C2Fiframe3E or goto /search.asp and copy this code : "briframe...

ACS Blog 0.80.91.01.1 - search.asp Cross-Site Scripting

ACS Blog 0.80.91.01.1 - search.asp Cross-Site Scripting source: https://www.securityfocus.com/bid/12836/info ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverag...

ACS Blog 0.8/0.9/1.0/1.1 - 'search.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12836/info ACS Blog is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...

CVE-2005-0214

Directory traversal vulnerability in Simple PHP Blog SPHPBlog 0.3.7c allows remote attackers to read or create arbitrary files via a .. dot dot in the entry parameter...

CVE-2005-0217

CVE-2005-0217 affects Invision Community Blog (index.php) with the eid parameter vulnerable to SQL injection. Root cause: unsanitized input in a database query via eid. Impact: partial disclosure/integrity/availability per NVD metrics. Exploitation: remote attackers can execute arbitrary SQL comm...

CVE-2005-0217

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...

CVE-2005-0214: Undefined Security Weakness

Directory traversal vulnerability in Simple PHP Blog SPHPBlog 0.3.7c allows remote attackers to read or create arbitrary files via a .. dot dot in the entry parameter...

CVE-2005-0217: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...

sparkleBlog.txt

Various Vulnerabilities in SparkleBlog SparkleBlog is an open-source PHP script which allows you to input and edit your weblog entries, without having to go through the hassle of coding in HTML and uploading via FTP every time you want to make an update. A weblog aka blog is simply an online...

Invision Community Blog Module eid Parameter SQL Injection

The remote host appears to be running Invision Community Blog, a weblog utility. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands through the 'index.php' script, which may in turn be used to gain administrative access on the remote host. %NASLMINLEVE...

Simple PHP Blog comments.php Traversal Arbitrary File Access

The remote version of Simple PHP Blog allows for retrieval of arbitrary files from the web server. These issues are due to a failure of the application to properly sanitize user-supplied input data. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

invisionSQL.txt

Invision Community Blog , is a powerful blogging system that will plug straight into your Invision Power Board. Allow your members to create their own individual blogs. Invision Community Blog is a comprehensive system with a very easy to use interface. Due to improper validation checks in the...

sphpBlog037.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: Simple PHP Blog directory traversal vulnerability Vulnerability discovery: Madelman Date: 02/01/2005 Severity: Moderate Summary: - -------- I started this project because I wanted a dead-simple blog. Something that didn't require a database, us...