CVE-2006-6951

CVE-2006-6951 describes a cross-site scripting (XSS) flaw in OdysseusBlog’s blog.php, exploitable by supplying a crafted value for the page parameter. Remote attackers could inject arbitrary script/HTML when the affected page is viewed, as reported in the connected documents. The sources confirm ...

CVE-2006-6661

Variable overwrite vulnerability in blog.php in PHP-Update 2.7 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code via multiple vectors that use the extract function, as demonstrated by the 1 f, 2 newmessage, 3 newusername, 4 adminuser, and ...

PHP-Update blog.php Variable Overwriting Arbitrary Code Execution

The remote host is running PHP-Update, a content management system written in PHP. The version of PHP-Update installed on the remote host fails to sanitize user-supplied arguments to the 'blog.php' script before importing them into the global symbol table. By leveraging this flaw, an...

Light Blog Multiple Vulnerabilities Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "\r\n"; echo "Light Blog Multiple Vulnerabilities Exploit\r\n"; echo "by BlackHawk [email protected]\r\n"; echo "Thanks to rgod for the php code and Marty for the Love\r\n\r\n"; if $argc4 echo "Usage: php ".$argv0."...

CVE-2006-3065

CVE-2006-3065 is a SQL injection vulnerability in blur6ex 0.3.462 affecting engine/shards/blog.php. The flaw allows remote attackers to inject arbitrary SQL via the ID parameter in a proc_reply action on the blog shard. The description notes similarity to CVE-2006-1763 but cites different affecte...

Sql injection

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php...

Blog System v1.2 SQL inj. vuln.

Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...