[Full-Disclosure] SQL Injection vulnerability in bBlog 0.7.3

Servers.co.nz Security Advisory SCN200409-1 Available in HTML format at http://www.servers.co.nz/security/SCN200409-1.php ------------------------------------------------------------ SQL Injection vulnerability in bBlog 0.7.3 Author: James McGlinn, Servers.co.nz Ltd jamesatservers dot co dot nz...

BBlog 0.7.4 - PostID SQL Injection

BBlog 0.7.4 - PostID SQL Injection source: https://www.securityfocus.com/bid/13398/info bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

bblog 0.7.2 cross site scripting

Introduction: Bblog, a blogging system scripted in PHP does not perform sufficient filtering when submitting a blog name. The severity of this flaw however, is low as the required privileges to access the administration panel for bblog is superuser. The problem: The flaw lies in...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...