CVE-2009-3719

CVE-2009-3719 is an XSS vulnerability in Battle Blog’s comment.asp affecting builds 1.25 and 1.30 build 2. The issue allows remote attackers to inject arbitrary web script or HTML via a comment. Documents identify the vulnerable component (comment.asp) and affected versions but do not provide add...

CVE-2009-3718

SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter...

CVE-2009-3719

Cross-site scripting XSS vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment...

CVE-2009-3718

CVE-2009-3718 describes a SQL injection in Battle Blog (versions 1.25 and 1.30 build 2). The vulnerability is triggered via the UserName parameter in admin/authenticate.asp, allowing remote attackers to execute arbitrary SQL commands. This aligns with the NVD entry (base score 7.5, HIGH) and indi...

CVE-2009-3718: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter...

CVE-2009-3719: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in comment.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to inject arbitrary web script or HTML via a comment...

Battle Blog 1.25 Auth Bypass SQL Injection / HTML Injection Vulns

Exploit for unknown platform in category web applications ================================================================= Battle Blog 1.25 Auth Bypass SQL Injection / HTML Injection Vulns ================================================================= battle blog sql/html injection...

Battle Blog 1.25 - Authentication Bypass / SQL Injection / HTML Injection

battle blog sql/html injection vulnerability author: $qLDoCt0r email: [email protected] msn: [email protected] blog: http://full-discl0sure.blogspot.com html injection vulnerability dork:inurl:comment.asp intext:Your e-mail address will be used to send you voting and comment...

Battle Blog 1.25 - Authentication Bypass SQL Injection HTML Injection

Battle Blog 1.25 - Authentication Bypass SQL Injection HTML Injection battle blog sql/html injection vulnerability author: $qLDoCt0r email: [email protected] msn: [email protected] blog: http://full-discl0sure.blogspot.com html injection vulnerability dork:inurl:comment.asp...

Battle Blog 1.25 Auth Bypass SQL Injection / HTML Injection Vulns

No description provided by source. battle blog sql/html injection vulnerability author: $qLDoCt0r email: [email protected] msn: [email protected] blog: http://full-discl0sure.blogspot.com html injection vulnerability dork:inurl:comment.asp intext:Your e-mail address will be use...

CVE-2009-1609

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2009-1609

CVE-2009-1609 refers to an unrestricted file upload vulnerability in Battle Blog 1.25, specifically in admin/uploadform.asp. An attacker can upload a file with an executable extension and then access it via a direct request to the uploaded file, enabling remote code execution. The entry is suppor...

CVE-2009-1609: Improper Input Validation

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file...

Battle Blog 1.25 - 'uploadform.asp' Arbitrary File Upload

Battle Blog 1.25 uploadform.asp Remote File Upload Vulnerability Found By : Cyber-Zone ABDELKHALEK +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://localhost/blog/admin/uploadform.asp After You Upload Your File You Will See The Link To THE File Just Below some demos ...

Battle Blog 1.25 - uploadform.asp Arbitrary File Upload

Battle Blog 1.25 - uploadform.asp Arbitrary File Upload Battle Blog 1.25 uploadform.asp Remote File Upload Vulnerability Found By : Cyber-Zone ABDELKHALEK +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ http://localhost/blog/admin/uploadform.asp After You Upload Your File...

Battle Blog 1.25 (uploadform.asp) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Battle Blog 1.25 uploadform.asp Arbitrary File Upload Vulnerability ===================================================================== Battle Blog 1.25 uploadform.asp...

Battle for Wesnoth PythonAI模块绕过安全限制漏洞

BUGTRAQ ID: 33971 CVECAN ID: CVE-2009-0367 Battle for Wesnoth（韦诺之战）是一款开源的战棋游戏。 Battle for Wesnoth的PythonAI中的某些白名单python模块错误的导入了本应受限制的python模块，如果用户受骗下载并使用了恶意的添加程序的话，就可能绕过沙盒限制执行任意Python代码。 David White Battle for Wesnoth 1.5.x David White Battle for Wesnoth 1.4.x 厂商补丁： David White -----------...

Sql injection

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626...

CVE-2008-2685

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626...

CVE-2008-2685

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626...