SoftBiz FAQ 1.1 add_comment.php id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15653/info Softbiz FAQ is prone to multiple SQL injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacke...

CVE-2007-3131

CVE-2007-3131 : The vulnerability is a Cross-site Scripting (XSS) flaw in Light Blog 4.1 prior to 20070606, reported in CVE-2007-3131. It affects add_comment.php where an attacker can supply a crafted id parameter to inject arbitrary web script or HTML. According to NVD, the impact is partial int...

CVE-2007-3131: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addcomment.php in Light Blog 4.1 before 20070606 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2006-7002: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addcomment.php in Wheatblog wB 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may...

Sql injection

Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via the 1 i or 2 postid parameter to addcomment.php, which triggers an injection in libraries.inc.php; or 3 the i parameter to listcomments.php, which triggers an injection in...

CVE-2007-0759: Undefined Security Weakness

Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via the 1 i or 2 postid parameter to addcomment.php, which triggers an injection in libraries.inc.php; or 3 the i parameter to listcomments.php, which triggers an injection in...

[Full-disclosure] Remote Sql Injection in EasyMoblog 0.5.1 # 2

·= Security Advisory =· Issue: Sql injection Vulnerability in EasyMoblog by Umberto Caldera. Discovered Date: 30/01/07 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://sourceforge.net/project/showfiles.php?groupid=88633 Ver: easymoblog-0.5.1 Details: EasyMoblog is...

CVE-2006-6746: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the idnews parameter to 1 addcomment.php or 2 shownews.php...

CVE-2006-5921

Multiple cross-site scripting XSS vulnerabilities in addcomment.php in Wheatblog wB allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 WWW, and 3 Comment fields. NOTE: this issue may overlap CVE-2006-5195...

CVE-2006-5921

CVE-2006-5921 describes cross-site scripting (XSS) in Wheatblog (wB) via add_comment.php. Vulnerable fields are the user-supplied inputs “Name,” “WWW,” and “Comment.” The issue is noted to potentially overlap CVE-2006-5195. Connected documents provide no explicit patch/version details or mitigati...

CVE-2006-5921: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in addcomment.php in Wheatblog wB allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 WWW, and 3 Comment fields. NOTE: this issue may overlap CVE-2006-5195...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...

CVE-2005-0219

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...

CVE-2005-0219: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Gallery 1.3.4-pl1 allow remote attackers to inject arbitrary web script or HTML via 1 the index field in addcomment.php, 2 setalbumName, 3 slideindex, 4 slidefull, 5 slideloop, 6 slidepause, 7 slidedir fields in slideshowlow.php, or 8 username...