CVE-2009-4801

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts...

Authentication flaw

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts...

Sql injection

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...

CVE-2009-4801

CVE-2009-4801 affects EZ-Blog Beta 1. The vulnerability is an authentication bypass: remote attackers can craft requests to PHP scripts to create or delete arbitrary posts due to missing access control. Root cause is lack of authentication on post-manipulation endpoints, enabling network-based, u...

CVE-2009-4805

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the storyid parameter to public/view.php or 2 the kill parameter to admin/remove.php...

Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ================================================ Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit ================================================ Exploit Title: Ollydbg 2.00 Beta1 Local Buffer Overflow Exploit Date: 2010-02-15 Author: SuBz3...

jgbbs-3.0beta1 DB Download Vulnerability

No description provided by source. ======================================================================================== | Title : Asp jgbbs-3.0beta1 DB Download Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria...

Piwik Open Flash Chart Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ========================================================== Piwik Open Flash Chart Remote Code Execution Vulnerability ========================================================== Class: Input Validation Error CVE: Remote: Yes Local: No...

Firebird SQL op_connect_request main listener shutdown Vulnerability

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Firebird SQL opconnectrequest main listener shutdown vulnerability 1. Advisory Information Title: Firebird SQL opconnectrequest mai...

Firebird SQL - op_connect_request main listener shutdown

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Firebird SQL opconnectrequest main listener shutdown vulnerability 1. Advisory Information Title: Firebird SQL opconnectrequest main listener shutdown vulnerability...

SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-->

------------------------------------------------------------ SQL INJECTION VULNERABILITY--Kjtechforce mailman Beta-1-- ------------------------------------------------------------ CMS INFORMATION: --WEB: http://sourceforge.net/projects/kjtechforce/ --DOWNLOAD:...

Kjtechforce Mailman Beta-1 SQL Injection

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://sourceforge.net/projects/kjtechforce/ | |--DOWNLOAD: http://sourceforge.net/projects/kjtechforce/ | |--...

Kjtechforce mailman b1 (dest) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Kjtechforce mailman b1 dest Remote Blind SQL Injection Exploit ================================================================ !/usr/bin/perl...

Kjtechforce mailman b1 - Delete Row code SQL Injection

Kjtechforce mailman b1 - Delete Row code SQL Injection || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

CVE-2009-1749

Catviz 0.4.0 beta 1 contains multiple XSS in index.php, exploitable via the userman_form and webpages_form parameters. Root cause is improper handling of these inputs, allowing remote injection of arbitrary script/HTML. The vulnerability affects the ability to inject content into pages consumed b...

EZ-Blog 'public/view.php' SQL Injection Vulnerability

EZ-Blog is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

EZ-Blog 1b SQL Injection

Salvatore "drosophila" Fresta Application: EZ-Blog http://sourceforge.net/projects/ez-blog/ Version: Beta 1 Bug: Multiple SQL Injection Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mail: [email protected] - BUGS S...

EZ-Blog 1b Delete All Posts / SQL Injection Vulnerabilities

No description provided by source. Salvatore "drosophila" Fresta Application: EZ-Blog http://sourceforge.net/projects/ez-blog/ Version: Beta 1 Bug: Multiple SQL Injection Exploitation: Remote Date: 1 Mar 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta e-mai...

BKWorks ProPHP 0.50b1 - Authentication Bypass

BKWorks ProPHP 0.50 Beta 1 Auth Bypass SQL Injection + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Dork : Powered by BKWorks ProPHP Version 0.50 Beta 1 + SQL Injection Login Bypass - Login as : Username : admin ' or ' 1=1 Password : anything or nothing And you will be logged...

CFAGCMS 1 - SQL Injection

CFAGCMS 1 - SQL Injection cfagcms Beta 1 sql inj. download: http://mesh.dl.sourceforge.net/sourceforge/cfagcms/cfagcms.zip Discovered By: ZoRLu z0rlu.blogspot.com [email protected] date: 23.10.2008 N0T: YALNIZLIK, YiTiRDi ANLAMINI YALNIZLIGIMDA :...