116 matches found
CVE-2006-4058
Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...
CVE-2006-4058
CVE-2006-4058 is an XSS vulnerability in archive.php for Simplog 0.9.3 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the keyw parameter during a search. The description explicitly notes this vulnerability affects Simplog versions up to 0.9.3 and earlier. Connec...
simplog 0.9.3 and prior XSS
HeLiOsZ - Dark End Team - Internet Security Team simplog 0.9.3 and prior XSS IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.simplog.org/ Exploit: - The vuln is in the search section,it don't validate the imput...
Sql injection
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2028
Cross-site scripting XSS vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2029
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2029
CVE-2006-2029 affects Jeremy Ashcraft’s Simplog, version 0.9.3 and earlier. The issue comprises multiple SQL injection vulnerabilities that let remote attackers execute arbitrary SQL commands via the following parameters: (a) tid in preview.php; (b) cid, pid, eid in archive.php; and (c) pid in co...
CVE-2006-2029
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2028
The CVE-2006-2028 entry concerns a Cross-site Scripting (XSS) vulnerability in imagelist.php of Jeremy Ashcraft Simpleg 0.9.3 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the imagedir parameter, with note that it may stem from directory traversal. Affected so...
[Full-disclosure] Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities.
--Security Report-- Advisory: Simplog = 0.93 Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 22:13 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Simplog http://www.simplog.org/ Version:...
Simplog 0.9.3 - ImageList.php Cross-Site Scripting
Simplog 0.9.3 - ImageList.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17653/info Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17653/info Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Simplog use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print "\n- NukedX Security Advisory Nr.2006-25\r\n"; print "- Simplog \r\n"; print "- - Victim's host ex:...
Simplog 0.9.3 - tid SQL Injection
Simplog 0.9.3 - tid SQL Injection !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print...
Simplog 0.9.3 - 'tid' SQL Injection
!/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl use IO::Socket; if@ARGV != 2 usage; else exploit; sub header print "\n- NukedX Security Advisory...
Simplog <= 0.9.3 (tid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Method found & Exploit scripted by nukedx Contacts ICQ: 10072 MSN/Main: [email protected] web: www.nukedx.com Original advisory: http://www.nukedx.com/?viewdoc=25 Usage: simplog.pl host path use IO::Socket; if@ARGV != 2 usage; else exploit; sub...
Simplog <= 0.9.2 Multiple Vulnerabilities
The remote host is running Simplog, an open source blogging tool written in PHP. The version of Simplog installed on the remote host fails to sanitize input to the 's' parameter of the 'doc/index.php' script before using it in a PHP 'include' function. Provided PHP's 'registerglobals' setting is...
CVE-2006-1777
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache errorlog file, which...