PT-2006-2100 · Daverave · Daverave Simplog

Name of the Vulnerable Software and Affected Versions: Daverave Simplog versions 1.0.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a blog post. This could potentially lead to unauthorized actions on the affected...

Simplog <= 1.0.2 Vulnerabilities

ORIGIONAL SOURCE: http://notlegal.ws/simplogsploit.txt ——–summary software: simplog vendors website: http://daverave.64digits.com/home.php?page=simplog versions: = 1.0.2 class: remote status: unpatched exploit: available solution: not available discovered by: retard and jim risk level: medium ——–...

Simplog 1.0.2 - Information Disclosure

Simplog 1.0.2 - Information Disclosure source: https://www.securityfocus.com/bid/16965/info Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input. Attackers may exploit this issue to gain access to potentially sensitive...

Simplog 1.0.2 - Information Disclosure

source: https://www.securityfocus.com/bid/16965/info Simplog is prone to an information-disclosure vulnerability. The application fails to properly sanitize user-supplied input. Attackers may exploit this issue to gain access to potentially sensitive information, aiding them in further attacks...

Design/Logic Flaw

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2006-0147

Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...

CVE-2005-3076

CVE-2005-3076 affects Simplog 0.9.1. The vulnerability allows remote attackers to execute arbitrary SQL commands or trigger SQL error messages by supplying invalid parameters to archive.php (pid, blogid, cid, m) or to blogadmin.php (blogid). Descriptions in NVD and CVE listings confirm these SQL ...

CVE-2005-3076: Undefined Security Weakness

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...