131 matches found
Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...
Simplog 0.9.3.1 - 'comments.php' SQL Injection
!/usr/bin/php input type=text name=cname maxlength=64 value="",$data; $bname = expl...
Simplog 0.9.3.1 - comments.php SQL Injection
Simplog 0.9.3.1 - comments.php SQL Injection !/usr/bin/php input type=text name=c...
Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ Simplog = 0.9.3.1 comments.php Remote SQL Injection Exploit ============================================================ !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection...
CVE-2006-4058
Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...
CVE-2006-4058
CVE-2006-4058 is an XSS vulnerability in archive.php for Simplog 0.9.3 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the keyw parameter during a search. The description explicitly notes this vulnerability affects Simplog versions up to 0.9.3 and earlier. Connec...
CVE-2006-4058
Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...
CVE-2006-4058: Undefined Security Weakness
Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...
simplog 0.9.3 and prior XSS
HeLiOsZ - Dark End Team - Internet Security Team simplog 0.9.3 and prior XSS IRC: darkend.sytes.net darkend , http://darkend.sytes.net & http://www.darkend.org Rish : Medium Type : web applet Creator: http://www.simplog.org/ Exploit: - The vuln is in the search section,it don't validate the imput...
Sql injection
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2028
Cross-site scripting XSS vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2029
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2029
CVE-2006-2029 affects Jeremy Ashcraft’s Simplog, version 0.9.3 and earlier. The issue comprises multiple SQL injection vulnerabilities that let remote attackers execute arbitrary SQL commands via the following parameters: (a) tid in preview.php; (b) cid, pid, eid in archive.php; and (c) pid in co...
CVE-2006-2028: Undefined Security Weakness
Cross-site scripting XSS vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter. NOTE: this issue might be resultant from directory traversal...
CVE-2006-2029: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2029
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 tid parameter in a preview.php; the 2 cid, 3 pid, and 4 eid parameters in b archive.php; and the 5 pid parameter in c comments.php...
CVE-2006-2028
The CVE-2006-2028 entry concerns a Cross-site Scripting (XSS) vulnerability in imagelist.php of Jeremy Ashcraft Simpleg 0.9.3 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the imagedir parameter, with note that it may stem from directory traversal. Affected so...
[Full-disclosure] Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities.
--Security Report-- Advisory: Simplog = 0.93 Multiple Remote Vulnerabilities. --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 21/04/06 22:13 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Simplog http://www.simplog.org/ Version:...
Simplog 0.9.3 - ImageList.php Cross-Site Scripting
Simplog 0.9.3 - ImageList.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17653/info Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Simplog 0.9.3 - 'ImageList.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17653/info Simplog is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...