EUVD-2010-4821

Malware in sbrugna...

xWeblog 2.2 - (arsiv.asp tarih) SQL Injection Exploit

No description provided by source. !/usr/bin/env python -- coding:utf-8 -- ''' Title : xWeblog v2.2 arsiv.asp tarih SQL Injection Exploit .py Proof : http://img408.imageshack.us/img408/7624/sqlm.jpg Script Down. : http://www.aspdunyasi.com/goster.asp?id=19 Tested : Windows XP Professional sp3...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

Sql injection

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4856

CVE-2010-4856 affects xWeblog 2.2, vulnerable in arsiv.asp via the tarih parameter to allow remote execution of SQL commands. The vulnerability is a SQL injection in the application, enabling partial confidentiality, integrity, and availability impact per the NVD metrics (base score 7.5). Related...

CVE-2010-4856: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

PT-2011-1791

Name of the Vulnerable Software and Affected Versions xWeblog version 2.2 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the tarih parameter in the arsiv.asp file. Recommendations For xWeblog version 2.2,...