CVE-2008-2524

BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...

CVE-2008-2524

BlogPHP 2.0 contains an authentication bypass vulnerability where a remote attacker can set a modified blogphp_username cookie to post messages or comments as an arbitrary user. Root cause: cookie field manipulation bypasses login checks. Affected product: BlogPHP 2.0. Practical impact: unauthori...

BlogPHP 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

BlogPHP 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can...

BlogPHP 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can exploit these issues to execute arbitrary script code in the context ...

CVE-2008-0679

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Sql injection

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0678

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0678

CVE-2008-0678 affects BlogPHP 2.0; an SQL injection in index.php via the id parameter in a page action allows remote execution of arbitrary SQL commands. The provided documents do not specify a patch/version for remediation; exploitation details are not described in the connected documents. The C...

CVE-2008-0679

CVE-2008-0679 describes a reflected XSS in BlogPHP 2.0's index.php via the search parameter. The vulnerability affects BlogPHP 2.0 and can allow injection of arbitrary script/HTML. The provided documents do not specify a patch or workaround; no exploitation status is given. Related entries (CVE-2...

CVE-2008-0678

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0679

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

blogphp-sql.txt

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH...

BlogPHP 2 - id Cross-Site Scripting SQL Injection

BlogPHP 2 - id Cross-Site Scripting SQL Injection !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== BlogPHP v.2 id XSS / Remote SQL Injection Exploit =================================================== !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS...

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

Sql injection

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

The CVE-2006-0372 entry concerns multiple SQL injection vulnerabilities in config.php of Insane Visions BlogPHP (likely version 1.0). The flaw allows remote attackers to inject arbitrary SQL via the blogphp_username or blogphp_password values stored in a cookie, enabling manipulation of the datab...

BlogPHP config.php SQL injection login bypass

--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...