12 matches found
EUVD-2006-1752
Malware in sbrugna...
EUVD-2006-1751
Malware in sbrugna...
CVE-2006-1751
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
Sql injection
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...
CVE-2006-1752
Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...
CVE-2006-1752
Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...
CVE-2006-1751
CVE-2006-1751 corresponds to multiple SQL injection vulnerabilities in MvBlog prior to 1.6, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The vulnerability is documented across NVD and CVE lists with a base CVSSv2 score of 7.5 (HIGH; network vector; low attack c...
CVE-2006-1752
The CVE-2006-1752 entry describes multiple XSS vulnerabilities in the MvBlog backend prior to version 1.6. The issue allows remote attackers to inject arbitrary web script or HTML through the comment fields (name or body). The sources do not provide concrete exploit vectors, in-the-wild exploitat...
CVE-2006-1751
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2006-1751: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...
CVE-2006-1752: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...