simplogsploit.txt

——–summary software: simplog vendors website: http://daverave.64digits.com/home.php?page=simplog versions: directory transversal: http://example.com/index.php?act=blog&blogid=../somefile http://example.com/index.php?act=../somefile ——– credit authors: retard and jim email: [email protected]...

CVE-2006-1072

Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...

CVE-2006-1073

Summary: CVE-2006-1073 affects Simplog (Daverave Simplog) up to version 1.0.2. Affected component: index.php; vulnerable function is directory traversal via the act and blogid parameters, allowing remote attackers to include or read arbitrary .txt files. The core root cause is insufficient input ...

CVE-2006-1073

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the 1 act and 2 blogid parameters...

PT-2006-2101 · Simplog · Simplog

Name of the Vulnerable Software and Affected Versions: Simplog versions 1.0.2 and earlier Description: A directory traversal issue exists, allowing remote attackers to include or read arbitrary .txt files. This is achieved via the act and blogid parameters in the index.php file. Recommendations:...

CVE-2006-1072

Affects Daverave Simplog, versions up to 1.0.2. The issue is a Cross-site scripting (XSS) vulnerability that allows injecting arbitrary web script or HTML via a blog post. The core detail provided is the vulnerability description; explicit root cause beyond generic XSS is not stated. Remediation ...

PT-2006-2100 · Daverave · Daverave Simplog

Name of the Vulnerable Software and Affected Versions: Daverave Simplog versions 1.0.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a blog post. This could potentially lead to unauthorized actions on the affected...

Simplog <= 1.0.2 Vulnerabilities

ORIGIONAL SOURCE: http://notlegal.ws/simplogsploit.txt ——–summary software: simplog vendors website: http://daverave.64digits.com/home.php?page=simplog versions: = 1.0.2 class: remote status: unpatched exploit: available solution: not available discovered by: retard and jim risk level: medium ——–...

Simplog 1.0.2 - Information Disclosure

Simplog 1.0.2 - Information Disclosure source: https://www.securityfocus.com/bid/16965/info Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input. Attackers may exploit this issue to gain access to potentially sensitive...

Simplog 1.0.2 - Information Disclosure

source: https://www.securityfocus.com/bid/16965/info Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input. Attackers may exploit this issue to gain access to potentially sensitive information, aiding them in further attacks...

Design/Logic Flaw

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...

CVE-2005-3076

CVE-2005-3076 affects Simplog 0.9.1. The vulnerability allows remote attackers to execute arbitrary SQL commands or trigger SQL error messages by supplying invalid parameters to archive.php (pid, blogid, cid, m) or to blogadmin.php (blogid). Descriptions in NVD and CVE listings confirm these SQL ...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...