CVE-2005-1309: Undefined Security Weakness

Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...

CVE-2005-1310

SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2004-1570

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2004-1570

CVE-2004-1570 affects bBlog 0.7.2/0.7.3 with a SQL injection via the p parameter, per multiple sources. OpenVAS/Nessus entries also cite RSS.php and index.php vulnerabilities on older bBlog (≤0.7.4) that could allow arbitrary PHP code execution or database control. No vendor-supplied fix details ...

CVE-2004-1570: Undefined Security Weakness

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter...

CVE-2004-1570

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter...

bBlog rss.php p Parameter SQL Injection

The remote server runs a version of bBlog, a blogging system written in PHP and released under the GPL, which is as old as or older than version 0.7.4. The remote version of this software is affected by a SQL injection attack in the script 'rss.php'. This issue is due to a failure of the...

Bblog Blog Software Detection

Binary data 2343.prm...

[Full-Disclosure] SQL Injection vulnerability in bBlog 0.7.3

Servers.co.nz Security Advisory SCN200409-1 Available in HTML format at http://www.servers.co.nz/security/SCN200409-1.php ------------------------------------------------------------ SQL Injection vulnerability in bBlog 0.7.3 Author: James McGlinn, Servers.co.nz Ltd jamesatservers dot co dot nz...

BBlog 0.7.4 - PostID SQL Injection

BBlog 0.7.4 - PostID SQL Injection source: https://www.securityfocus.com/bid/13398/info bBlog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resul...

bblog 0.7.2 cross site scripting

Introduction: Bblog, a blogging system scripted in PHP does not perform sufficient filtering when submitting a blog name. The severity of this flaw however, is low as the required privileges to access the administration panel for bblog is superuser. The problem: The flaw lies in...

CVE-2004-1865

Cross-site scripting XSS vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name $blogname. NOTE: if administrators are normally allowed to add HTML by other means, e.g. through...