CVE-2009-0400

CVE-2009-0400 is an SQL injection in SocialEngine’s Blog Plugin (blog.php) via the category_id parameter. The vulnerability affects SocialEngine 3.06 trial and allows an unauthenticated remote attacker to manipulate database queries, potentially leading to sensitive information disclosure or data...

CVE-2009-0400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in SocialEngine 3.06 trial allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

Social Engine (category_id) SQL Injection Vulnerability

No description provided by source. ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

CVE-2008-5733

The CVE-2008-5733 entry concerns the Team Impact TI Blog System mod for PHP-Fusion. Affected component: blog.php. The vulnerability is a SQL injection via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause is unsafely handled input in the id parameter. Impac...

CVE-2008-5733: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter...

Vlog System 1.1 - SQL Injection

Vlog System 1.1 - SQL Injection Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Vlog System 1.1 blog.php user Remote SQL Injection Vulnerability ================================================================== Viva IslaM Viva IslaM Remote SQL injecti...

Vlog System 1.1 (blog.php user) Remote SQL Injection Vulnerability

No description provided by source. Viva IslaM Viva IslaM Remote SQL injection Vulnerability Vlog System V1.1 blog.php user AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM && WwW.AtsDp.CoM/f Email : [email protected] SYRIAN Arab HACkErS -: Exploite :- www.Target.com/blog.php?user= REAL USER NAME HERE...

CVE-2008-3164

CVE-2008-3164 affects fuzzylime (cms) 3.01 (and 3.01a) with a directory traversal condition in blog.php. When magic_quotes_gpc is disabled, an attacker can supply a .. in the file parameter to cause the application to include and execute arbitrary local files. The vulnerability impact is remote c...

CVE-2008-3164: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in blog.php in fuzzylime cms 3.01, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the file parameter. NOTE: it was later reported that 3.01a is also affected...

CVE-2008-0677: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action...

CVE-2008-0424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in blog.php in Mooseguy Blog System MGBS 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter...

mgbs-sql.txt

MGBS 1.0 Remote SQL injection Script url http://sourceforge.net/project/showfiles.php?groupid=193233 Vulnerable code in blog.php ?php $month = $GET'month'; $result = mysqlquery"SELECT FROM blog WHERE posted='$month' ORDER BY id DESC" or die"HELP QUERY BROKEN"; ... Admin hash exploit...

Mooseguy Blog System 1.0 (blog.php month) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Mooseguy Blog System 1.0 blog.php month SQL Injection Vulnerability ===================================================================== MGBS 1.0 Remote SQL injection...

CVE-2006-6951

CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...

CVE-2006-6951: Undefined Security Weakness

Cross-site scripting XSS vulnerability in blog.php in OdysseusBlog allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-6661

Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the 1 f, 2 newmessage, 3 newusername, 4 adminuser, and ...

PHP-Update blog.php Variable Overwriting Arbitrary Code Execution

The remote host is running PHP-Update, a content management system written in PHP. The version of PHP-Update installed on the remote host fails to sanitize user-supplied arguments to the 'blog.php' script before importing them into the global symbol table. By leveraging this flaw, an...

CVE-2006-6661: Undefined Security Weakness

Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the 1 f, 2 newmessage, 3 newusername, 4 adminuser, and ...

Light Blog Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Light Blog Multiple Vulnerabilities Exploit\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0."...