Cross site scripting

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

Sql injection

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

CVE-2006-0233

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

CVE-2006-0233: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

CVE-2006-0233

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

[eVuln] microBlog BBCode XSS Vulnerability

New eVuln Advisory: microBlog BBCode XSS Vulnerability http://evuln.com/vulns/36/summary/bt/ --------------------Summary---------------- Software: microBlog Sowtware's Web Site: http://www.stamcar.com/projekti/microblog/ Versions: 2.0 RC-10 Critical Level: Harmless Type: Cross-Site Scripting Clas...

CVE-2006-0234: Undefined Security Weakness

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

[eVuln] microBlog SQL Injection Vulnerability

New eVuln Advisory: microBlog SQL Injection Vulnerability http://evuln.com/vulns/35/summary/bt/ --------------------Summary---------------- Software: microBlog Sowtware's Web Site: http://www.stamcar.com/projekti/microblog/ Versions: 2.0 RC-10 Critical Level: Moderate Type: SQL Injection Class:...

CVE-2006-0234

CVE-2006-0234 documents a SQL injection vulnerability in the web application component: index.php of the microBlog 2.0 RC-10 release. The underlying issue is an injection flaw that allows remote attackers to append arbitrary SQL commands via the two parameters, (1) month and (2) year. The vulnera...

microBlog 2.0 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/16270/info microBlog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...

microBlog 2.0 - index.php Multiple SQL Injections

microBlog 2.0 - index.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16270/info microBlog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...