116 matches found
CVE-2006-1779
Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...
Directory traversal
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache errorlog file, which...
Cross site scripting
Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...
CVE-2006-1778
CVE-2006-1778 affects Simplog
CVE-2006-1776
Summary: CVE-2006-1776 affects Simplog
CVE-2006-1777
CVE-2006-1777 affects Simplog
CVE-2006-1776
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s parameter...
CVE-2006-1777
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, as demonstrated by injecting PHP sequences into an Apache errorlog file, which...
CVE-2006-1779
CVE-2006-1779 describes a Cross-site scripting (XSS) vulnerability in Simplog 0.9.2 and earlier, specifically in login.php where the btag parameter can be used to inject arbitrary script/HTML. Affected product: Simplog (Jeremy Ashcraft) <= 0.9.2. Attack vector from the description is a remote ...
CVE-2006-1778
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 blogid parameter in a index.php and b archive.php, the 2 m and 3 y parameters in archive.php, and the 4 sql parameter in c server.php...
CVE-2006-1779
Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...
simplog_092_incl_xpl
!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.simplog.org/ description: "Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is...
Simplog 0.9.2 - 's' Remote Command Execution
!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.simplog.org/ description: "Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is written in PHP and compatible with multiple...
Simplog 0.9.2 - s Remote Command Execution
Simplog 0.9.2 - s Remote Command Execution !/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://www.simplog.org/ description: "Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is w...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Simplog = 0.9.2 "s" remote cmmnds xctn\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "dork: intext:"Powered by simplog"\r\n\r\n"; if $argc5 echo "Usage: php...
Simplog <= 0.9.2 (s) Remote Commands Execution Exploit
Exploit for unknown platform in category web applications ====================================================== Simplog \r\n"; die; / software site: http://www.simplog.or...
CVE-2006-1072
Cross-site scripting XSS vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post...
Directory traversal
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the 1 act and 2 blogid parameters...