EUVD-2006-0327

Malware in sbrugna...

Bit 5 Blog 8.1 AddComment.PHP HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16246/info Bit 5 Blog is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Bit 5 Blog 8.1 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...

Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)

An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)

An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2006-0361

Cross-site scripting XSS vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an tag in the comment parameter, which strips most tags but not...

CVE-2006-0361

Cross-site scripting XSS vulnerability in addcomment.php in Bit 5 Blog 8.01 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an tag in the comment parameter, which strips most tags but not...

CVE-2006-0361

The CVE-2006-0361 entry concerns Bit 5 Blog 8.01. The vulnerability is a cross-site scripting (XSS) flaw in addcomment.php, where an attacker can inject arbitrary script/HTML by supplying a javascript URI within an tag in the comment parameter. The filter reportedly strips most tags but not , en...

EV0031.txt

New eVuln Advisory: Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability http://evuln.com/vulns/31/summary/bt/ --------------------Summary---------------- Software: Bit 5 Blog Sowtware's Web Site: http://bit5blog.sourceforge.net/ Versions: 8.01 Critical Level: Moderate Type: SQL Injecti...

EV0032.txt

New eVuln Advisory: Bit 5 Blog JavaScript Insertion Vulnerability http://evuln.com/vulns/32/summary/bt/ --------------------Summary---------------- Software: Bit 5 Blog Sowtware's Web Site: http://bit5blog.sourceforge.net/ Versions: 8.01 Critical Level: Harmless Type: Cross-Site Scripting Class:...

CVE-2006-0320

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...

Sql injection

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...

CVE-2006-0320

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...

CVE-2006-0320

CVE-2006-0320 affects Bit 5 Blog 8.01, with vulnerability in admin/processlogin.php that allows an attacker to bypass authentication and execute arbitrary SQL via the (1) username and (2) password parameters. The provided connected documents confirm the affected file and the SQL injection mechani...

[eVuln] Bit 5 Blog JavaScript Insertion Vulnerability

New eVuln Advisory: Bit 5 Blog JavaScript Insertion Vulnerability http://evuln.com/vulns/32/summary/bt/ --------------------Summary---------------- Software: Bit 5 Blog Sowtware's Web Site: http://bit5blog.sourceforge.net/ Versions: 8.01 Critical Level: Harmless Type: Cross-Site Scripting Class:...

[eVuln] Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability

New eVuln Advisory: Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability http://evuln.com/vulns/31/summary/bt/ --------------------Summary---------------- Software: Bit 5 Blog Sowtware's Web Site: http://bit5blog.sourceforge.net/ Versions: 8.01 Critical Level: Moderate Type: SQL Injecti...

Bit 5 Blog 8.1 - index.php SQL Injection

Bit 5 Blog 8.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

[SA18464] Bit 5 Blog Script Insertion and SQL Injection Vulnerabilities

TITLE: Bit 5 Blog Script Insertion and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18464 VERIFY ADVISORY: http://secunia.com/advisories/18464/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Bit 5 Blog 8.x...

Bit 5 Blog 8.1 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16244/info Bit 5 Blog is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...