CVE-2025-69033

CVE-2025-69033 describes a DOM-based XSS in the WordPress plugin Blog Filter (Post Filtering) that affects Blog Filter versions up to 1.7.3. Root cause: Improper input neutralization during web page generation. Impact per CVSS 3.1 (Network, Low/Low/Low, scope changed): Confidentiality, Integrity,...

EUVD-2020-0586

Malware in sbrugna...

WordPress Plugin Blog Floating Button Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in the...

CVE-2020-15156

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...

PT-2020-14233

Name of the Vulnerable Software and Affected Versions nodebb-plugin-blog-comments versions prior to 0.7.0 Description The issue is due to a lack of CSRF validation, making a logged-in user potentially vulnerable to an XSS attack. This could allow a third party to post on the user's behalf on the...

CVE-2020-15156: Cross-Site Request Forgery (CSRF)

In nodebb-plugin-blog-comments before version 0.7.0, a logged in user is vulnerable to an XSS attack which could allow a third party to post on their behalf on the forum. This is due to lack of CSRF validation...

PT-2017-8577

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site scripting issue allows remote authenticated attackers to inject arbitrary web script or HTML. Recommendations For versions 3.0.10 and earlier, update to a version later...

PT-2017-8581

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators via unspecified vectors. Recommendations For versions 3.0.10 and earlie...

PT-2017-8578

Name of the Vulnerable Software and Affected Versions baserCMS plugin Blog versions 3.0.10 and earlier Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators. Recommendations For versions 3.0.10 and earlier, update to a version...

e107 Plugin Blog (macgurublog.php) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================================== e107 Plugin Blog macgurublog.php Remote SQL Injection Vulnerability ===================================================================== @Title: e107 Plugin Blog...

e107 Plugin BLOG Engine 2.1.4 Remote SQL Injection Vulnerability

No description provided by source. e107 Plugin macgurublogmenu macgurublog.php uid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 28/10/2008 n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:"macgurublog.php?uid=" exploit:...

e107 Plugin BLOG Engine 2.1.4 - SQL Injection

e107 Plugin macgurublogmenu macgurublog.php uid Remote Sql inj author: ZoRLu home: z0rlu.blogspot.com concat: [email protected] date: 28/10/2008 n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : n0te: a.q kpss : dork: allinurl:"macgurublog.php?uid=" exploit:...

e107 Plugin BLOG Engine 2.2 - 'uid' SQL Injection

!/usr/bin/perl e107 Plugin BLOG Engine v2.2 SQL Injection Exploit ..::virangar security team::.. www.virangar.net C0d3d BY:virangar security team hadihadi special tnx to: MR.nosrati,black.shadowes,MR.hesy,Ali007,Zahra & all virangar members & all hackerz my lovely friends hadiaryaie2004 &...

e107blog-sql.txt

::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:to my best friend...

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection

e107 Plugin BLOG Engine 2.2 - uid Blind SQL Injection ::e107 Plugin BLOG Engine v2.2 macgurublog.php/uid Blind SQL Injection Vulnerability:: Virangar Security Team www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all...

e107 Plugin BLOG Engine 2.2 (rid) Blind SQL Injection Vulnerability

No description provided by source. + Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, a...

e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection

Author: Saime + Script: e107 Plugin BLOG Engine v2.2 rid Blind SQL Injection + URL: http://e107coders.org/download.php?view.1843 + Date: 13/05/2008 + Greetz: BaKo,DrWh4x,optiplex,xprog,cam-man-dan,Tulle,t0pP8uZz,Inspiratio,Novalok,illuz1oN,Untamed,GM,str0ke, and everyone else I forgot! + Site:...