217 matches found
CVE-2006-7043
Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in 1 posts and 2 profile names; and 3 a javascript URI in a URL argument in the photo gallery...
CVE-2006-5441
PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from thi...
CVE-2006-5441
CVE-2006-5441 : In Comdev Web Blogger 4.1, the adminfoot.php file is vulnerable to PHP remote file inclusion when register_globals is enabled. An attacker can supply a URL in the path[docroot] parameter to execute arbitrary PHP code. This is exercised via a remote inclusion vector and is describe...
CVE-2006-5101
CVE-2006-5101 is a PHP remote file inclusion vulnerability in Comdev CSV Importer 3.1 (and possibly 4.1) used across multiple Comdev components (Contact Form, Helpdesk, Events Calendar, FAQ/Support, Guestbook, Links Directory, News Publisher, Newsletter, Photo Gallery, Vote Caster, Web Blogger, e...
Comdev Web Blogger 3.1 :) <= Remote File Inclusion
+-------------------------------------------------------------------- + + Comdev Web Blogger 3.1 : = Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: Comdev Web Blogger 3.1 + Venedor ...........: http://www.comdevweb.com + Clas...
CVE-2006-3514
Multiple cross-site scripting XSS vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the 1 name, 2 title, 3 news, 4 description, and 5 sitename parameters...
CVE-2006-3514
Multiple cross-site scripting XSS vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the 1 name, 2 title, 3 news, 4 description, and 5 sitename parameters...
CVE-2006-3514
PHP-Blogger 2.2.5 (and possibly earlier) has multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the parameters: name, title, news, description, and sitename. The CVE notes only the presence of XSS w...
os2a_1006.txt
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities OS2A ID: OS2A1006 Status: 14/06/2006 Issue Discovered 23/06/2006 Reported to the vendor No response on repeated notification 07/07/2006 Advisory Released Class: Cross Site Scripting Severity: Medium Overview: --------- PHP-Blogger is a fre...
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities OS2A ID: OS2A1006 Status: 14/06/2006 Issue Discovered 23/06/2006 Reported to the vendor No response on repeated notification 07/07/2006 Advisory Released Class: Cross Site Scripting Severity: Medium Overview: --------- PHP-Blogger is a fre...
CVE-2005-1818
CVE-2005-1818 affects NewLife Blogger prior to 3.3.1. Connected documents confirm multiple SQL injection vulnerabilities enabling remote attackers to execute arbitrary SQL commands via unknown attack vectors. The sources do not specify a patched version or remediation steps. Exploitation details ...
CVE-2005-1818
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2005-1818
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors...
Code insertion in Blogger comments
Having notified Blogger of this twice over the course of a number of months, and not seeing them take any action beyond saying that they'll look at it or warn their users, I think it's time to warn people. Under the following conditions, Blogger weblogs are vulnerable to executable code insertion...
[SA13665] PHP-Blogger Disclosure of Sensitive Information Security Issue
TITLE: PHP-Blogger Disclosure of Sensitive Information Security Issue SECUNIA ADVISORY ID: SA13665 VERIFY ADVISORY: http://secunia.com/advisories/13665/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: PHP-Blogger 1.x...
[Full-Disclosure] Blogger XSS Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------ BLOGGER XSS VULNERABILITY - ------------------------------------------------------ Online URL : http://ferruh.mavituna.com/article/?470 Severity : Moderately Critical for Members Permanent Accou...
