129 matches found
myblog 安全漏洞
myblog is a personal blog by the individual developer of ZeroWdd. A security vulnerability exists in version 1.0 of myblog, which stems from an incorrect operation of the parameter findBlogList/getTotalBlogs that results in xml injection...
myblog 安全漏洞
myblog is a personal blog by the individual developer of ZeroWdd. A security vulnerability exists in version 1.0 of myblog. An attacker exploiting this vulnerability could gain unauthorized access to the system...
PT-2025-2050 · Unknown · Zerowdd Myblog
Name of the Vulnerable Software and Affected Versions: ZeroWdd myblog version 1.0 Description: A problem has been detected in the update function of the file src/main/java/com/wdd/myblog/controller/admin/BlogController.java. This issue leads to cross site scripting attacks, which can be launched...
PT-2025-2048 · Unknown · Zerowdd Myblog
Name of the Vulnerable Software and Affected Versions: ZeroWdd myblog version 1.0 Description: A critical issue has been found in the unknown code of the file src/main/resources/mapper/BlogMapper.xml. The manipulation of the findBlogList and getTotalBlogs arguments leads to xml injection. The...
PT-2025-2049 · Unknown · Zerowdd Myblog
Name of the Vulnerable Software and Affected Versions: ZeroWdd myblog version 1.0 Description: A critical issue has been found in the upload function of the file src/main/java/com/wdd/myblog/controller/admin/uploadController.java. The manipulation of the file argument leads to unrestricted upload...
Joomla com_Myblog Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications + Title : Joomla comMyblog Exploit Arbitrary File Upload Vulnerability ---------------------------------------------------- + Author : Back-DOOR ---------------------------------------------------- + Exploit by : Back-DOOR + Dork google :...
MyBlog <= 0.9.8 Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog = 0.9.8: PHP and MySQL Blog/CMS software / Cookie poisioning -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: MyBlog $ File affected: all /admin/.php files...
MyBlog 0.9.8 Settings.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23521/info MyBlog is prone to an authentication-bypass vulnerability. Attackers can exploit this issue to bypass the authentication mechanism and then access or overwrite files with arbitrary PHP script code. Script code...
MyBlog 1.x Games.PHP ID Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...
MyBlog 0.9.8 Multiple Remote Information Disclosure Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain...
MyBlog 1.x - SQL Injection and Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/28313/info MyBlog is prone to multiple input-validation vulnerabilities, including: - Multiple SQL-injection vulnerabilities - Multiple remote file-include vulnerabilities - A privilege-escalation vulnerability An attacke...
MyBlog存在任意文件上传漏洞
MyBlog是一个J2ee的开源自建blog系统，攻击者通过他的一些组件问题，可以上传任意文件。 由于使用了早期版本的fckeditor。导致可以通过文件名截断，绕过后缀名验证，上传任意文件。 提交如下http包，即可上传shell http://jdkcn.com/upload/Image/b.jsp POST /FCK/editor/filemanager/browser/default/connectors/jsp/connector?Command=FileUpload&Type=Image&CurrentFolder=%2F HTTP/1.1 Accept: /...
MyBlog presence of the arbitrary file upload vulnerability-vulnerability warning-the black bar safety net
MyBlog presence of the arbitrary file upload vulnerability 2011.4.30 Publishing author: BNE MyBlog is a J2ee open source self-built blog system, an attacker by some of his Assembly question, you can upload any file. Due to the use of an earlier version of the fckeditor the. Lead by the file name...
CVE-2010-1540
Directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. NOTE: some of these details are obtained from third party information...
Directory traversal
Directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-1540
Directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. NOTE: some of these details are obtained from third party information...
CVE-2010-1540
CVE-2010-1540 : A directory traversal vulnerability affects Joomla! component com_myblog (MyBlog) version 3.0.329, where an attacker can read arbitrary files via a .. (dot dot) in the task parameter of index.php. This is a vulnerability in the Joomla! MyBlog component and is documented in both th...
CVE-2008-6193
Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...
CVE-2008-6193
CVE-2008-6193 affects Sam Crew MyBlog: passwords are stored in cleartext in a MySQL database, enabling potential access to sensitive information. The root cause is cleartext password storage. The connected documents do not provide patch versions or remediation steps. Exploitation details are not ...