81 matches found
Design/Logic Flaw
Nibbleblog 4.0.5 on macOS defaults to having .DSStore in each directory, causing DSStore information to leak...
CVE-2018-6470
Nibbleblog 4.0.5 on macOS defaults to having .DSStore in each directory, causing DSStore information to leak...
CVE-2018-6470
Nibbleblog 4.0.5 on macOS is affected by an information disclosure vulnerability where .DS_Store files are present in each directory, leaking DS_Store metadata. Root cause is the default behavior of placing DS_Store files in directories, enabling partial confidentiality impact (DS_Store data expo...
CVE-2018-6470
Nibbleblog 4.0.5 on macOS defaults to having .DSStore in each directory, causing DSStore information to leak...
CVE-2018-6470: Exposure of Sensitive Information to an Unauthorized Actor
Nibbleblog 4.0.5 on macOS defaults to having .DSStore in each directory, causing DSStore information to leak...
PT-2018-17567
Name of the Vulnerable Software and Affected Versions Nibbleblog version 4.0.5 Description The issue causes DS Store information to leak due to .DS Store files being present in each directory by default on macOS. Recommendations For Nibbleblog version 4.0.5, consider removing or restricting acces...
Nibbleblog File Upload Vulnerability
Exploit for php platform in category remote exploits This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Nibbleblog File Upload Vulnerability', 'Description' = %q Nibbleblog contai...
Nibbleblog 4.0.3 - Arbitrary File Upload (Metasploit)
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Nibbleblog File Upload Vulnerability', 'Description' = %q Nibbleblog contains a flaw that allows a authenticated remote attacker...
Nibbleblog File Upload
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Nibbleblog File Upload Vulnerability', 'Description' = %q Nibbleblog contains a flaw that allows a authenticated remote attacker...
Nibbleblog 'index.php'存在多个跨站脚本漏洞
No description provided by source...
Nibbleblog 4.0.3 admin.php CSRF
No description provided by source. this." document.getElementById"myForm".submit;...
Nibbleblog Cross-Site Request Forgery Vulnerability
NibbleBlog is a set of blogging engines. A cross-site request forgery vulnerability exists in Nibbleblog versions prior to 4.0.3 due to an admin.php script that fails to adequately filter newsimple operations and filter the 'content' parameter in newsimple operations. A remote attacker can exploi...
Nibbleblog Arbitrary File Upload Vulnerability
NibbleBlog is a set of blogging engines. An arbitrary file upload vulnerability exists in the My Image plugin for Nibbleblog versions prior to 4.0.3. A remote attacker can exploit this vulnerability by uploading an executable file and sending a direct request to access the file to execute arbitra...
CVE-2015-6967
Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...
CVE-2015-6966
Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...
Unrestricted file upload
Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...
CVE-2015-6966
Multiple cross-site request forgery CSRF vulnerabilities in Nibbleblog before 4.0.5 allow remote attackers to hijack the authentication of administrators for requests that 1 create a post via a newsimple action to admin.php or 2 conduct cross-site scripting XSS attacks via the content parameter i...
CVE-2015-6966
CVE-2015-6966 concerns a CSRF vulnerability in Nibbleblog prior to version 4.0.5, enabling remote attackers to hijack administrator authentication via a new_simple action to admin.php (including post creation) and to trigger XSS through the content parameter in the same new_simple path. The root ...
CVE-2015-6967
Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in content/private/plugins/myimage/image.php...