LoudBlog <= 0.8.0a (ajax.php) SQL Injection Vulnerability (auth)

Exploit for unknown platform in category web applications ================================================================ LoudBlog new; print "\n LoudBlog Exploit All Version By Xianur0\n\n"; $uri = $ARGV0; $id = $ARGV1; $password = $ARGV3 || die"\nUse: loudblog.pl URI ID Admin Valid User Valid...

LoudBlog 0.8.0a - 'ajax.php' SQL Injection

!/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use LWP::UserAgent; use Digest::MD5 qwmd5hex; $ua =...

LoudBlog 0.8.0a - ajax.php SQL Injection

LoudBlog 0.8.0a - ajax.php SQL Injection !/usr/bin/perl This Exploit requires a valid user name and password of an account regardless of the permissions Author: Xianur0 Affected: All Versions Bug: SQL Injection Doorks: allintext: "powered by LoudBlog" use HTTP::Request::Common qwPOST; use...

Loudblog cross-site scripting vulnerability

Overview Loudblog, an open source content management system used for podcasting, etc., contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly condust session...

Sql injection

Eval injection vulnerability in loudblog/inc/parseold.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter...

CVE-2008-0139

Eval injection vulnerability in loudblog/inc/parseold.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter...

Immunity Canvas: LOUDBLOG_EXEC

Name| loudblogexec ---|--- CVE| CVE-2008-0139 Exploit Pack| CANVAS Description| Loudblog Remote Code Execution Notes| CVE Name: CVE-2008-0139 VENDOR: Loudblog.com Repeatability: Infinite References: http://secunia.com/advisories/28336/ CVE Url: https://vulners.com/cve/CVE-2008-0139 CVSS: 6.8...

CVE-2008-0139

CVE-2008-0139 affects Loudblog 0.8.0 and earlier. An Eval injection in loudblog/inc/parse_old.php via the template parameter allows remote attackers to execute arbitrary PHP code. CVSS2 base metrics indicate Network access, no authentication, and partial impact to confidentiality, integrity, and ...

CVE-2008-0139

Eval injection vulnerability in loudblog/inc/parseold.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter...

LoudBlog &lt;= 0.6.1 (parsedpage) Remote Code Execution Vulnerability

No description provided by source. ---- Loudblog Remote Code Execution ... ITDefence.ru Antichat.ru Loudblog = 0.6.1 Remote Code Execution Eugene Minaev [email protected] / / . / /// // / / // / / / /// / / / / / // / / / / / / / / / / / / / / / / / // / / / / // / // / /\ / // 2007 //// //...

loudblog-exec.txt

---- Loudblog Remote Code Execution ... ITDefence.ru Antichat.ru Loudblog = 0.6.1 Remote Code Execution Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \ //...

Loudblog loudblog/inc/parse_old.php template Parameter Arbitrary Remote Code Execution

The remote host is running Loudblog, a PHP application for publishing podcasts and similar media files. The version of Loudblog on the remote host fails to sanitize input to the 'template' parameter of the 'loudblog/inc/parseold.php' script before using it in an 'eval' statement to evaluate PHP...

LoudBlog 0.6.1 - 'parsedpage' Remote Code Execution

---- Loudblog Remote Code Execution ... ITDefence.ru Antichat.ru Loudblog = 0.6.1 Remote Code Execution Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 //// // //\ \ \ //...

LoudBlog <= 0.6.1 (parsedpage) Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ================================================================== LoudBlog = 0.6.1 Remote Code Execution / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007...

LoudBlog 0.6.1 - parsedpage Remote Code Execution

LoudBlog 0.6.1 - parsedpage Remote Code Execution ---- Loudblog Remote Code Execution ... ITDefence.ru Antichat.ru Loudblog = 0.6.1 Remote Code Execution Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / /...

CVE-2006-3820

Cross-site scripting XSS vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3820

Cross-site scripting XSS vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-3820

Loudblog before 0.5 is affected by a Cross-site scripting (XSS) vulnerability in loudblog/index.php via the page parameter. The root cause is unsafely handling the page parameter, enabling arbitrary script or HTML execution in users’ browsers. Reported impact includes potential exposure of sessio...

CVE-2006-3832

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...