EUVD-2007-1984

Malware in sbrugna...

CVE-2008-6193

CVE-2008-6193 affects Sam Crew MyBlog: passwords are stored in cleartext in a MySQL database, enabling potential access to sensitive information. The root cause is cleartext password storage. The connected documents do not provide patch versions or remediation steps. Exploitation details are not ...

CVE-2008-6193

Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

Remote file inclusion

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-1990

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-1990

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-1990

The provided connected documents confirm a PHP remote file inclusion vulnerability in Sam Crew MyBlog (games.php) affecting versions 1.0–1.6. The flaw allows an attacker to retrieve arbitrary PHP code execution by supplying a crafted URL parameter (scoreid in CVE-2007-1968/2007-1990 entries; also...

CVE-2007-1990

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-1990: Undefined Security Weakness

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-1968. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-1969

Cross-site scripting XSS vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-1968

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter...

CVE-2007-1968

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter...

CVE-2007-1968

CVE-2007-1968 : PHP remote file inclusion in Sam Crew MyBlog (likely 1.0–1.6) enables an attacker to execute arbitrary PHP code via a URL in the scoreid parameter. Root cause is unsanitized user input leading to remote file inclusion. The connected documents corroborate the same vulnerability pat...

CVE-2007-1969

CVE-2007-1969 describes an XSS vulnerability in Sam Crew MyBlog, specifically in admin/modify.php where the id parameter can be manipulated to inject arbitrary web script/HTML by remote attackers. The NVD entry lists a CVSS v2 base score of 4.3 (Medium) with impact confined to confidentiality and...

CVE-2007-1969

Cross-site scripting XSS vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-1969: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2007-1968: Undefined Security Weakness

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter...