129 matches found
CVE-2008-4341
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin...
Authentication flaw
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin...
CVE-2008-4341
add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin...
CVE-2008-4341
CVE-2008-4341 affects MyBlog 0.9.8 and earlier. The flaw allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin, indicating a broken/authentication check based on cookie values. The provided sources describe the vulnerabl...
MyBlog <= 0.9.8 Insecure Cookie Handling Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog = 0.9.8: PHP and MySQL Blog/CMS software / Cookie poisioning -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: MyBlog $ File affected: all /admin/.php files...
myblog-cookie.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog eNYe-Sec - www.enye-sec.org MyBlog is an open source Blog/CMS project. It allows begginers to have a simple to use blog/cms and it will still please developers with feature packed system with plugins, themes and modules...
MyBlog 0.9.8 - Insecure Cookie Handling
MyBlog 0.9.8 - Insecure Cookie Handling -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog eNYe-Sec - www.enye-sec.org MyBlog is an open source Blog/CMS project. It allows begginers to have a simple to use blog/cms and it will still please developers with feature packed...
MyBlog 0.9.8 - Insecure Cookie Handling
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= MyBlog eNYe-Sec - www.enye-sec.org MyBlog is an open source Blog/CMS project. It allows begginers to have a simple to use blog/cms and it will still please developers with feature packed system with plugins, themes and modules...
MyBlog <= 0.9.8 Insecure Cookie Handling Vulnerability
Exploit for unknown platform in category web applications ====================================================== MyBlog eNYe-Sec - www.enye-sec.org MyBlog is an open source Blog/CMS project. It allows begginers to have a simple to use blog/cms and it will still please developers with feature pack...
MyBlog多个远程信息泄漏漏洞
BUGTRAQ ID: 30310 CNCAN ID：CNCAN-2008072204 MyBlog是一款基于PHP的博客程序。 MyBlog存在多个输入验证问题，远程攻击者可以利用漏洞获得敏感信息。...
MyBlog <=0.9.8 Multiple Vulnerabilities
www.BugReport.ir AmnPardaz Security Research Team Title: MyBlog =0.9.8 Multiple Vulnerabilities Vendor: http://crewdesign.co.uk & http://sourceforge.net/projects/myblog Exploit: Available Vulnerable Version: 0.9.8 Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/49 1. Description:...
myblog-multi.txt
www.BugReport.ir AmnPardaz Security Research Team Title: MyBlog =0.9.8 Multiple Vulnerabilities Vendor: http://crewdesign.co.uk & http://sourceforge.net/projects/myblog Exploit: Available Vulnerable Version: 0.9.8 Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/49 1. Description:...
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may...
MyBlog 0.9.8 - Multiple Remote Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/30310/info MyBlog is prone to multiple information-disclosure vulnerabilities because the application fails to properly restrict access to sensitive files. An unprivileged attacker may exploit these issues to obtain sensitive information. MyBlog 0.9.8 is...
CVE-2008-2962
Multiple cross-site scripting XSS vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 sort parameters to index.php, and the 3 id parameter to post.php...
Sql injection
Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the 1 view parameter to a index.php, and the 2 id parameter to b member.php and c post.php...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 sort parameters to index.php, and the 3 id parameter to post.php...
CVE-2008-2963
Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the 1 view parameter to a index.php, and the 2 id parameter to b member.php and c post.php...
CVE-2008-2962
CVE-2008-2962 describes multiple cross-site scripting (XSS) vulnerabilities in MyBlog. The issues allow remote attackers to inject arbitrary script or HTML via the following parameters: s and sort to index.php, and id to post.php. Affected component files are index.php and post.php. The informati...
CVE-2008-2962
Multiple cross-site scripting XSS vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the 1 s and 2 sort parameters to index.php, and the 3 id parameter to post.php...