105 matches found
RCE-Simplephpblog-biggiedroid
CVE-2025-15495 - 임의 파일 업로드로 인한 원격 코드 실행 RCE 제품 BiggiDroid – 간단한 PHP 블로그 CMS 제품 페이지: https://biggidroid.com/product/simple-php-blog/ 취약점 유형 임의 파일 업로드 무제한 파일 업로드 원격 코드 실행 RCE 심각도 치명적 CVSS 추정: 9.8 AV:N / AC:L / PR:L / UI:N / S:U / C:H / I:H / A:H 요약 Simple PHP Blog CMS 에는 관리자 패널의 사이트 로고 업로드 기능 에 무제한...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223
The CVE-2025-15223 issue affects Philipinho Simple-PHP-Blog, specifically in the file /login.php where manipulation of the Username parameter enables cross-site scripting. The vulnerability is exploitable remotely, with public exploits, and is associated with versions prior to the commit 94b5d3e5...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
Simple-PHP-Blog 代码注入漏洞
Simple-PHP-Blog is a simple blogging system by the individual developer Philip Okugbe. A code injection vulnerability exists in Simple-PHP-Blog, which stems from an incorrect manipulation of the parameter Username in the file /login.php, which could lead to a cross-site scripting attack...
CVE-2025-15223: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-14227
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227 Philipinho Simple-PHP-Blog edit.php sql injection
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227 Philipinho Simple-PHP-Blog edit.php sql injection
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227
CVE-2025-14227 affects Philipinho Simple-PHP-Blog (up to commit 94b5d3e57308bce5dfbc44c3edafa9811893d958). The vulnerability is an SQL injection in the /edit.php handler caused by improper input processing. It is remotely exploitable over the network with no privileges and no user interaction req...
CVE-2025-14227: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
EUVD-2005-3472
Malware in sbrugna...
EUVD-2007-5052
Malware in sbrugna...
EUVD-2007-5053
Malware in sbrugna...
EUVD-2005-0215
Malware in sbrugna...
EUVD-2005-2788
Malware in sbrugna...