adv100-K-159-2008.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql Injection Vulnerability...

Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Comdev Web Blogger = 4.1.3 arcmonth Sql Injection Vulnerability ================================================================== Author : M.Hasran Addahroni Date : July, ...

Comdev Web Blogger 4.1.3 - 'arcmonth' SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql Injection Vulnerability...

Comdev Web Blogger 4.1.3 - arcmonth SQL Injection

Comdev Web Blogger 4.1.3 - arcmonth SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV100$2008 ----------------------------------------------------------------------------------------- ECHOADV100$2008 Comdev Web Blogger = 4.1.3 arcmonth Sql...

CVE-2008-1533

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

Code injection

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

CVE-2008-1533

CVE-2008-1533 affects Joomla! 1.5 via the XML-RPC Blogger API plugin. The vulnerability allows remote attackers to perform unauthorized article operations on articles through unknown vectors. The public description lacks concrete exploit details or affected versions beyond Joomla! 1.5 and the plu...

CVE-2008-1533

Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors...

Directory traversal

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

CVE-2008-0559

CVE-2008-0559 affects Nilson’s Blogger 0.11. The vulnerability is a directory-traversal flaw that allows remote attackers to include and execute arbitrary local files via a .. in two parameters: (1) permalink in core.php (through index.php) and (2) thispost in comments.php. Root cause is improper...

CVE-2008-0559

Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the permalink parameter in core.php, accessed through index.php; and 2 the thispost parameter in comments.php...

nilson-disclose.txt

nilson's blogger 0.11 remote file disclosure vulnerabilities download http://sourceforge.net/projects/nilson-blogger/ author muuratsalo contact muuratsaloatgmail.com exploits http://localhost/nilson-blogger0.11/index.php?permalink=../../../../../../../../../../etc/passwd...

Nilsons Blogger 0.11 - comments.php Local File Inclusion

Nilsons Blogger 0.11 - comments.php Local File Inclusion source: https://www.securityfocus.com/bid/27559/info Nilson's Blogger is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using...

Nilson's Blogger 0.11 - 'comments.php' Local File Inclusion

source: https://www.securityfocus.com/bid/27559/info Nilson's Blogger is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include local files in the context of the...

PHP-Blogger pref.db Database Information Disclosure

The remote host is running PHP-Blogger, a photo blog script written in PHP. The version of PHP-Blogger installed on the remote host stores configuration information in the file 'data/pref.db' and fails to restrict access to this file. By issuing a direct request for the file, an attacker can gain...

CVE-2007-3179

Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors...

Sql injection

Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors...

CVE-2007-3179

Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the month parameter and other unspecified vectors...

CVE-2007-3179

CVE-2007-3179 affects Particle Blogger versions up to 1.2.1. The vulnerability is SQL injection in archives.php, exploitable via the month parameter and other unspecified vectors, allowing remote attackers to execute arbitrary SQL commands. The provided documents do not specify a confirmed exploi...