Simplog 0.9.3 Archive.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

Simplog multiple pieces of vulnerability analysis-vulnerability warning-the black bar safety net

Late night bored go find some CMS for mining vulnerability, listening to friends say simplog there are many vulnerabilities, that I also the next to see his program exactly how unsafe. Due to time problems yourself from the code analysis, and test that part of it is not written!!! Coming to the...

CVE-2009-4091

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4092

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

Deserialization of untrusted data

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4091

The CVE-2009-4091 entry affects Simplog 0.9.3.2 (and potentially earlier) in comments.php where access restrictions are insufficient. This permits remote attackers to edit or delete comments via the (1) edit or (2) del actions. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with netwo...

CVE-2009-4092

The CVE-2009-4092 entry describes a Cross-site request forgery (CSRF) vulnerability in Simplog 0.9.3.2 (and possibly earlier) affecting the user.php component. The underlying issue enables remote attackers to hijack the authentication of administrators and users to perform password-change request...

CVE-2009-4091

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the 1 edit or 2 del action...

CVE-2009-4093

The CVE-2009-4093 entry describes multiple cross-site scripting (XSS) vulnerabilities in Simplog 0.9.3.2 and possibly earlier, exploitable through the cname (Name) or email parameters in comments.php. The affected component is the comments.php handling in Simplog, with the underlying issue being ...

CVE-2009-4092

Cross-site request forgery CSRF vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords...

CVE-2009-4093

Multiple cross-site scripting XSS vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 cname Name or 2 email parameters...

Simplog 0.9.3.2 XSS / XSRF

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

Simplog v0.9.3.2 Mutliple Vulnerabilities

No description provided by source. Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amo...

Simplog v0.9.3.2 Mutliple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Simplog v0.9.3.2 Mutliple Vulnerabilities ========================================= Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog...

Simplog 0.9.3.2 - Multiple Vulnerabilities

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

Simplog 0.9.3.2 - Multiple Vulnerabilities

Simplog 0.9.3.2 - Multiple Vulnerabilities Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download...

Unfixed XSS vulnerability at www.meganjackson.org

Security researcher SaMTHG, has submitted on 07/07/2009 a cross-site-scripting XSS vulnerability affecting www.meganjackson.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currentl...