EUVD-2008-3306

Malware in sbrugna...

EUVD-2014-1079

Malware in sbrugna...

EUVD-2006-1338

Malware in sbrugna...

EUVD-2008-2197

Malware in sbrugna...

Maian Weblog 4.0 SQL Injection

Introduction Exploit Title: Maian Weblog a SQL Injection Date: 27.01.2017 Vendor Homepage: http://www.maianweblog.com/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overview Simple blog system for your website, Easily add/edit...

Maian Weblog 4.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Introduction Exploit Title: Maian Weblog – SQL Injection Date: 27.01.2017 Vendor Homepage: http://www.maianweblog.com/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overvie...

Maian Weblog 4.0 - SQL Injection

Maian Weblog 4.0 - SQL Injection Introduction Exploit Title: Maian Weblog – SQL Injection Date: 27.01.2017 Vendor Homepage: http://www.maianweblog.com/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overview Simple blog system...

Maian Weblog 4.0 - SQL Injection

Introduction Exploit Title: Maian Weblog – SQL Injection Date: 27.01.2017 Vendor Homepage: http://www.maianweblog.com/ Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web Application Exploits Overview Simple blog system for your website, Easily add/edit...

Maian Weblog Cross-Site Request Forgery Vulnerability

Maian Weblog is a free and open source PHP blogging system developed by British software developer David Ian Bennett. The system includes modules for commenting, searching, uploading images and videos. A cross-site scripting vulnerability exists in the index.php script of Maian Weblog 4.0 and...

Maian Weblog 4.0 - Cross-Site Request Forgery ( Add New Post)

Exploit for php platform in category web applications Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)

Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link :...

Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)

Exploit Title : Maian Weblog 4.0 - Cross-Site Request Forgery Add New Post Author : Besim Google Dork : - Date : 10/10/2016 Type : webapps Platform : PHP Vendor Homepage : http://www.maianweblog.com Software link : http://www.hotscripts.com/listings/jump/download/21864 CSRF PoC " /...

CVE-2014-10007

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 subject parameter in a contact action to index.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 subject parameter in a contact action to index.php...

CVE-2014-10007

CVE-2014-10007 : Multiple cross-site scripting (XSS) vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary script/HTML via the name, email, or subject parameters in a contact action to index.php. The affected software is Maian Weblog (versions up to 4.0 and ea...

CVE-2014-10007

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 subject parameter in a contact action to index.php...

PT-2015-3651

Name of the Vulnerable Software and Affected Versions Maian Weblog versions 4.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the name, email, or subject parameter in a contact action to "index.php". This can lead to cross-site scripting XSS...

CVE-2014-10007: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Maian Weblog 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 subject parameter in a contact action to index.php...

maian weblog <= 4.0 - Remote Blind SQL Injection

No description provided by source. ?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. //...

Maian Weblog <= 4.0 Insecure Cookie Handling Vulnerability

No description provided by source. -+================================================================================+- -+ Maian Weblog = v4.0 Insecure Cookie Handling Vulnerability +- -+================================================================================+- Discovered By: S.W.A.T...