Simplog 0.9.3 - archive.php?PID Cross-Site Scripting

Simplog 0.9.3 - archive.php?PID Cross-Site Scripting source: https://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute i...

CVE-2006-5282

SH-News 3.1 and earlier is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to trigger arbitrary PHP code execution by supplying a URL in the scriptpath parameter to one of five pages: report.php, archive.php, comments.php, init.php, or news.php. The iss...

CVE-2006-4058

CVE-2006-4058 is an XSS vulnerability in archive.php for Simplog 0.9.3 and earlier, allowing remote attackers to inject arbitrary web script or HTML via the keyw parameter during a search. The description explicitly notes this vulnerability affects Simplog versions up to 0.9.3 and earlier. Connec...

Remote file inclusion

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIGscriptpath variable. NOTE: 2.1.4 was also reported to be vulnerable...

CVE-2006-1154

The CVE-2006-1154 entry concerns a PHP remote file inclusion vulnerability in archive.php of Fantastic News (versions 2.1.2 and reported as vulnerable in 2.1.4). The underlying issue is that the CONFIG[script_path] parameter can be exploited by remote attackers to include arbitrary files, enablin...

[eVuln] CheesyBlog XSS Vulnerability

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

CheesyBlog-1.0.txt

New eVuln Advisory: CheesyBlog XSS Vulnerability http://evuln.com/vulns/49/summary.html --------------------Summary---------------- Software: CheesyBlog Sowtware's Web Site: http://cheesepizza.net/ Versions: 1.0 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...

CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid 1 pid, 2 blogid, 3 cid, or 4 m parameters to archive.php, or the 5 blogid parameter to blogadmin.php...