SoftBiz FAQ 1.1 add_comment.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...

CVE-2007-3131

CVE-2007-3131 : The vulnerability is a Cross-site Scripting (XSS) flaw in Light Blog 4.1 prior to 20070606, reported in CVE-2007-3131. It affects add_comment.php where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. According to NVD, the impact is partial int...

Sql injection

Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via the 1 i or 2 postid parameter to addcomment.php, which triggers an injection in libraries.inc.php; or 3 the i parameter to listcomments.php, which triggers an injection in...

[Full-disclosure] Remote Sql Injection in EasyMoblog 0.5.1 # 2

·= Security Advisory =· Issue: Sql injection Vulnerability in EasyMoblog by Umberto Caldera. Discovered Date: 30/01/07 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://sourceforge.net/project/showfiles.php?groupid=88633 Ver: easymoblog-0.5.1 Details: EasyMoblog is...

CVE-2006-5921

Multiple cross-site scripting XSS vulnerabilities in addcomment.php in Wheatblog wB allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 WWW, and 3 Comment fields. NOTE: this issue may overlap CVE-2006-5195...

CVE-2006-5921

CVE-2006-5921 describes cross-site scripting (XSS) in Wheatblog (wB) via add_comment.php. Vulnerable fields are the user-supplied inputs “Name,” “WWW,” and “Comment.” The issue is noted to potentially overlap CVE-2006-5195. Connected documents provide no explicit patch/version details or mitigati...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...