17 matches found
CVE-2005-1818
Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors...
EUVD-2005-1820
Malware in sbrugna...
EUVD-2008-6150
Malware in sbrugna...
NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger = v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NewLife...
Sql injection
SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...
CVE-2008-6180
SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...
CVE-2008-6180
The CVE-2008-6180 entry concerns a SQL injection in the file system/nlb_user.class.php of NewLife Blogger (versions 3.0 and earlier, possibly 3.3.1). The vulnerability allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie, indicating an authentication/input handling weakne...
CVE-2008-6180
SQL injection vulnerability in system/nlbuser.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie...
NewLife Blogger <= v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger = v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NewLife Blogger $ Version: = 3.0 $ File...
newlife-cookiesql.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function checkLogin 144. // loing check 145. if isset $COOKIE'nlb3' 146. $dat...
NewLife Blogger 3.0 - Insecure Cookie Handling / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function checkLogin 144. // loing check 145. if isset $COOKIE'nlb3' 146. $dat...
NewLife Blogger 3.0 - Insecure Cookie Handling SQL Injection
NewLife Blogger 3.0 - Insecure Cookie Handling SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function...
NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= NewLife Blogger = v3.0 / Insecure Cookie Handling & SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= $ Program: NewLife...
NewLife Blogger <= 3.0 Insecure Cookie Handling / SQL Injection Vuln
Exploit for unknown platform in category web applications ==================================================================== NewLife Blogger eNYe-Sec - www.enye-sec.org Cookie format is: nlb3=7::96e79218965eb72c92a549dd5a330112 nlb3=iduser::md5 pass --Bug -- 143. function checkLogin 144. // loi...
CVE-2005-1818
CVE-2005-1818 affects NewLife Blogger prior to 3.3.1. Connected documents confirm multiple SQL injection vulnerabilities enabling remote attackers to execute arbitrary SQL commands via unknown attack vectors. The sources do not specify a patched version or remediation steps. Exploitation details ...