EUVD-2008-5746

Malware in sbrugna...

EUVD-2008-5745

Malware in sbrugna...

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection Vulnerabilities

No description provided by source. =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...

CVE-2008-5776

Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 action parameter to admin.php and the 2 get parameter to index.php. NOTE: in some environments, this can be leveraged fo...

CVE-2008-5775

SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 action parameter to admin.php and the 2 get parameter to index.php. NOTE: in some environments, this can be leveraged fo...

Sql injection

SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5776

CVE-2008-5776 affects Aperto Blog 0.1.1. The vulnerability is a directory traversal in the (1) action parameter to admin.php and (2) get parameter to index.php, enabling remote attackers to include and execute arbitrary local files. In some environments, this can be leveraged for remote file incl...

CVE-2008-5776

Multiple directory traversal vulnerabilities in Aperto Blog 0.1.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 action parameter to admin.php and the 2 get parameter to index.php. NOTE: in some environments, this can be leveraged fo...

CVE-2008-5775

SQL injection vulnerability in categories.php in Aperto Blog 0.1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5775

The CVE-2008-5775 entry concerns an SQL injection vulnerability in the Aperto Blog 0.1.1 product, specifically in categories.php where the id parameter can be manipulated to execute arbitrary SQL. The underlying issue is a lack of input validation/sanitization for the id parameter, enabling an at...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities

No description provided by source. =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Aperto Blog 0.1.1 Local File Inclusion / SQL Injection Vulnerabilities ======================================================================...

Aperto Blog 0.1.1 Local File Inclusion / SQL Injection

=========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor : http://code.google.com/p/apertoblog/ Download :...

Aperto Blog 0.1.1 - Local File Inclusion / SQL Injection

=========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor : http://code.google.com/p/apertoblog/ Download :...

Aperto Blog 0.1.1 - Local File Inclusion SQL Injection

Aperto Blog 0.1.1 - Local File Inclusion SQL Injection =========================================================================================================== o Aperto Blog 0.1.1 Local File Inclusion and SQL Injection Vulnerabilities Software : Aperto Blog version 0.1.1 Vendor :...