comdevwb-rfi.txt

Comdev Web Blogger 4.1 RFI Vulnerability Infomation:- Scripts: Comdev Web Blogger Download: http://www.comdevweb.com/downloadfile.php?product=BLOGG41&url=http://share.comdevweb.com/download/blogger-4.1.zip Version : 4.1 Exploit :...

Remote file inclusion

PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter, a different vector than CVE-2006-5441...

CVE-2007-3084

PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter, a different vector than CVE-2006-5441...

CVE-2007-3084

The CVE-2007-3084 entry describes a PHP remote file inclusion vulnerability in Comdev Web Blogger 4.1. Specifically, sampleblogger.php is vulnerable to arbitrary PHP code execution via a URL supplied in the path[docroot] parameter, representing a different vector from CVE-2006-5441. The available...

Comdev Web Blogger 4.1 RFI Vulnerability

Comdev Web Blogger 4.1 RFI Vulnerability Infomation:- Scripts: Comdev Web Blogger Download: http://www.comdevweb.com/downloadfile.php?product=BLOGG41&url=http://share.comdevweb.com/download/blogger-4.1.zip Version : 4.1 Exploit :...

Particle Blogger Archives.PHP SQL注入漏洞

Particle Blogger是一款基于PHP的WEB应用程序。 Particle Blogger不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Archives.PHP'脚本对用户提交的'month'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Particle Soft Particle Blogger 1.2.1 Particle Soft Particle Blogger 1.2 Particle Soft Particle Blogger 1.1.2 Particle Soft Particl...

CVE-2007-1510

SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

Sql injection

SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2007-1510

Particle Blogger 1.0.0–1.2.0 victims: SQL injection in post.php via the postid parameter allows remote execution of arbitrary SQL commands. Root cause is improper handling of input in the SQL query, enabling attacker access to/alteration of database data. CVSS details indicate high impact with pa...

CVE-2007-1510

SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

pb-sql.txt

Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit function ps unique.action=""+document.unique.site.value+"/post.php?postid=-1//UNION//SELECT//null,username,password,null,null,null,null//FROM//pblusers/"; unique.submit; Particle Blogger All Version Post.PHP PostID Remote S...

Particle Blogger Post.PHP SQL注入漏洞

Particle Blogger是一款基于PHP的WEB应用程序。 Particle Blogger不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'Post.PHP'脚本对用户提交的'postid'参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Particle Soft Particle Blogger 1.2 Particle Soft Particle Blogger 1.1.2 Particle Soft Particle Blogger 1.1.1 Particle Soft Particl...

Particle Blogger <= 1.2.0 (post.php postid) Remote SQL Injection Exploit

No description provided by source. !-- Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-16 Product / Vendor : Particle Soft http://blogger.particlesoft.net/ Bug : http://localhost/script/post.php?postid=-SQL Inj- Particle Blogge...

Particle Blogger 1.2.1 - 'Archives.php' SQL Injection

source: https://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

Particle Blogger 1.2.1 - Archives.php SQL Injection

Particle Blogger 1.2.1 - Archives.php SQL Injection source: https://www.securityfocus.com/bid/24232/info Particle Blogger is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Particle Blogger <= 1.2.0 (post.php postid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================================== Particle Blogger Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit function ps...

Particle Blogger 1.2.0 - post.php?postid SQL Injection

Particle Blogger 1.2.0 - post.php?postid SQL Injection Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit function ps unique.action=""+document.unique.site.value+"/post.php?postid=-1//UNION//SELECT//null,username,password,null,null,null,null//FROM//pblusers/"; unique.submit...

Particle Blogger 1.2.0 - 'post.php?postid' SQL Injection

Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit function ps unique.action=""+document.unique.site.value+"/post.php?postid=-1//UNION//SELECT//null,username,password,null,null,null,null//FROM//pblusers/"; unique.submit; Particle Blogger All Version Post.PHP PostID Remote S...

CVE-2006-7043

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in 1 posts and 2 profile names; and 3 a javascript URI in a URL argument in the photo gallery...

CVE-2006-7043

CVE-2006-7043 describes multiple XSS vulnerabilities in Chipmunk Blogger. Remote authenticated users can inject arbitrary script/HTML via (1) posts, (2) profile names, and (3) a javascript: URI in a URL argument in the photo gallery. The NVD notes a low base score (3.5) with attack vector Network...