52 matches found
CVE-2008-4436
SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...
CVE-2008-4436
CVE-2008-4436 : In bBlog 0.7.6, the vulnerability is in bblog_plugins/builtin.help.php and is a SQL injection via the mod parameter, allowing remote attackers to execute arbitrary SQL commands. The CVSS-derived notes in the NVD show a Base Score 7.5 (HIGH) with network access, low attack complexi...
CVE-2008-4436: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in bblogplugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter...
bblog-sql.txt
BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln: if$GET'mod' $pluginrow = $bBlog-getrow"select from ".TPLUGINS." where name='".$GET'mod'."' and type='modifier'"; PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bbauthors-- help: On the number you can see...
BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability
No description provided by source...
BBlog 0.7.6 - mod SQL Injection
BBlog 0.7.6 - mod SQL Injection BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln: if$GET'mod' $pluginrow = $bBlog-getrow"select from ".TPLUGINS." where name='".$GET'mod'."' and type='modifier'"; PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bbauthors--...
BBlog 0.7.6 - 'mod' SQL Injection
BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln: if$GET'mod' $pluginrow = $bBlog-getrow"select from ".TPLUGINS." where name='".$GET'mod'."' and type='modifier'"; PoC: ?pid=1&mod='+union+select+1,2,3,4,5,6,7,8,9,10,11,12+from+bbauthors-- help: On the number you can see...
BBlog 0.7.6 (mod) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================== BBlog 0.7.6 mod Remote SQL Injection Vulnerability ==================================================== BBlog 0.7.6 SQL Injection Vuln Vulnpath: /bblogplugins/builtin.help.php Vuln:...
bBlog SQL injection flaw
The remote server runs a version of bBlog, a blogging system written in PHP and released under the GPL, which is as old as or older than version 0.7.4. The remote version of this software is affected by a SQL injection attacks in the script 'rss.php'. This issue is due to a failure of the...
bBlog SQL injection flaw
The remote server runs a version of bBlog which is as old as or older than version 0.7.4. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2004-1865
Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...
CVE-2004-1865
CVE-2004-1865 describes a cross-site scripting vulnerability in the administration panel of bBlog 0.7.2 . The issue allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via the blog name parameter ($blogname). The provided sources indicate the vulnera...
CVE-2004-1865: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...
bBlog <= 0.7.4 Multiple Vulnerabilities (SQLi, XSS)
The remote host is running bBlog, an open source blog software application. According to its banner, the remote version of this software suffers from several vulnerabilities: - A SQL Injection Vulnerability It is reportedly possible to inject SQL statements through the 'postid' parameter of the...
CVE-2005-1309
Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...
CVE-2005-1310
CVE-2005-1310 concerns bBlog 0.7.4, where a SQL Injection flaw in the index.php postid parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple sources (CVE entry, NVD listing, and Nessus plugin for bBlog
CVE-2005-1309
Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...
CVE-2005-1310
SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter...
CVE-2005-1309
CVE-2005-1309 is an XSS vulnerability in bBlog 0.7.4 that allows remote attackers to inject arbitrary script or HTML via the entry title field or the comment body text. The weakness is confirmed in multiple sources (NVD entry with CVSSv2 base score 4.3, MEDIUM) and is echoed across related adviso...