2 matches found
BirdBlog 1.4 - adminlogs.php?page Cross-Site Scripting
BirdBlog 1.4 - adminlogs.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...
CVE-2006-2103
SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...