CVE-2020-15014

BlogCMS (through 2019-12-31) is affected by a Cross-Site Request Forgery (CSRF) vulnerability in the admin/changepass.php endpoint. Multiple sources (CNVD-2021-38665, CVE-2020-15014, RH/CVE, NVD, and PRION) consistently describe a CSRF flaw in BlogCMS that can enable unauthorized state-changing r...

PT-2020-14119

Name of the Vulnerable Software and Affected Versions pramodmahato BlogCMS through 2019-12-31 Description The issue concerns a CSRF vulnerability in the admin/changepass.php endpoint. This allows for potential unauthorized password changes. Recommendations For pramodmahato BlogCMS through...

CVE-2020-15014: Cross-Site Request Forgery (CSRF)

pramodmahato BlogCMS through 2019-12-31 has admin/changepass.php CSRF...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

Design/Logic Flaw

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

BlogCMS through 2016-10-25 has XSS via a comment...

CVE-2018-16779

CVE-2018-16779 affects BlogCMS (through 2016-10-25) with a reflected/Stored XSS via a comment. The connected records confirm the issue existence and CVSS details (CVSS2 base 4.3, CVSS3 base 6.1) but do not provide affected versions beyond the date, or concrete exploitation details, patches, or mi...

CVE-2018-16779: Improper Neutralization of Input During Web Page Generation

BlogCMS through 2016-10-25 has XSS via a comment...

PT-2018-13742

Name of the Vulnerable Software and Affected Versions BlogCMS versions prior to 2016-10-25 Description The issue allows for XSS via a comment. Recommendations For versions prior to 2016-10-25, update to a version released after 2016-10-25 to resolve the issue...

blogcms 4.2.1b (sql/xss) Multiple Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public...

[DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public Advisory: 16.01.2008 Authors: Alexand...

DSECRG-08-003.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public Advisory: 16.01.2008 Authors: Alexand...

Blogcms 4.2.1b (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public...

Blog:CMS 4.2.1b - SQL Injection Cross-Site Scripting

Blog:CMS 4.2.1b - SQL Injection Cross-Site Scripting Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008...

Blogcms 4.2.1b (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Blogcms 4.2.1b SQL/XSS Multiple Remote Vulnerabilities ======================================================== Digital Security Research Group DSecRG Advisory DSECRG-08-003...

Blog:CMS 4.2.1b - SQL Injection / Cross-Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-08-003 Application: Blogcms Versions Affected: Blogcms 4.2.1b Vendor URL: http://blogcms.com/ Bugs: SQL Injestions, SiXSS, XSS Exploits: YES Reported: 15.01.2008 Vendor response: 16.01.2008 Date of Public Advisory: 16.01.2008 Authors: Alexand...

blogcms400-rfi.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM blogcms ...

Blog:CMS 4.1.3 - 'list.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21173/info BLOG:CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user i...

blogcms => 4.0.0 Remote File Include

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM blogcms ...