Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...

Simplog 0.9.3 BlogID Parameter Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Simplog multiple pieces of vulnerability analysis-vulnerability warning-the black bar safety net

Late night bored go find some CMS for mining vulnerability, listening to friends say simplog there are many vulnerabilities, that I also the next to see his program exactly how unsafe. Due to time problems yourself from the code analysis, and test that part of it is not written!!! Coming to the...

CVE-2009-4091

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4092

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

Deserialization of untrusted data

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4091

The CVE-2009-4091 entry affects Simplog 0.9.3.2 (and potentially earlier) in comments.php where access restrictions are insufficient. This permits remote attackers to edit or delete comments via the (1) edit or (2) del actions. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with netwo...

CVE-2009-4091

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4092

The CVE-2009-4092 entry describes a Cross-site request forgery (CSRF) vulnerability in Simplog 0.9.3.2 (and possibly earlier) affecting the user.php component. The underlying issue enables remote attackers to hijack the authentication of administrators and users to perform password-change request...

CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

CVE-2009-4092

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

CVE-2009-4093

The CVE-2009-4093 entry describes multiple cross-site scripting (XSS) vulnerabilities in Simplog 0.9.3.2 and possibly earlier, exploitable through the cname (Name) or email parameters in comments.php. The affected component is the comments.php handling in Simplog, with the underlying issue being ...

CVE-2009-4093: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

CVE-2009-4092: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

CVE-2009-4091: Undefined Security Weakness

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

Simplog 0.9.3.2 XSS / XSRF

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

Simplog v0.9.3.2 Mutliple Vulnerabilities

No description provided by source. Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amo...