CVE-2006-4592

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...

CVE-2006-4592

The CVE-2006-4592 entry concerns the 8pixel.net Simple Blog 2.3 and earlier . The vulnerability is an incomplete blacklist allowing SQL injection via the id parameter in default.asp where ">" characters bypass protection. This enables remote attackers to perform SQL injection. References indic...

CVE-2006-4592: Undefined Security Weakness

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...

simpleBlogXSS.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via 1 a comment to comments.asp and 2 possibly certain other fields in unspecified scripts...

Sql injection

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts...

CVE-2006-0239

CVE-2006-0239 describes multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1. An attacker can inject arbitrary script/HTML via (1) a comment to comments.asp and (2) possibly other fields in unspecified scripts. The accessible impact is partial confidentiality and integrity (per ...

CVE-2006-0240

CVE-2006-0240 involves multiple SQL injection vulnerabilities in Simple Blog 2.1 . The flaws allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly other parameters in unspecified scripts. The primary sources consistently descri...

CVE-2006-0240

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts...

CVE-2006-0239

Multiple cross-site scripting XSS vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via 1 a comment to comments.asp and 2 possibly certain other fields in unspecified scripts...

CVE-2006-0240: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts...

CVE-2006-0239: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Simple Blog 2.1 allow remote attackers to inject arbitrary web script or HTML via 1 a comment to comments.asp and 2 possibly certain other fields in unspecified scripts...