EUVD-2008-1892

Malware in sbrugna...

EUVD-2008-1763

Malware in sbrugna...

EUVD-2008-1760

Malware in sbrugna...

EUVD-2008-6443

Malware in sbrugna...

Blogator Script 0.93 Insecure Settings

==================================================================================================================================== | Title : Blogator script v 0.93 Reinstall default Password Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firef...

Blogator-script 0.95 - 'bs_auth.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28810/info Blogator-script is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...

CVE-2008-6473

blogadata/include/initpass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter...

Default credentials

blogadata/include/initpass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter...

CVE-2008-6473

CVE-2008-6473 affects Blogator-script 0.95. The vulnerability arises in blogadata/include/init_pass2.php where a crafted value for the a parameter with a trailing percent wildcard in b allows remote attackers to change the password for arbitrary users. Reported impact: partial integrity and parti...

CVE-2008-1892

Cross-site scripting XSS vulnerability in bsauth.php in Blogator-script 0.95 and 1.01 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1892

Blogator-script 0.95 and 1.01 are affected by a Cross-Site Scripting (XSS) vulnerability in bs_auth.php where the msg parameter is not properly sanitized. This allows remote attackers to inject arbitrary web script or HTML, potentially compromising users’ browsers (e.g., stealing cookies) when in...

Blogator-script 0.95 - 'bs_auth.php' Cross-Site Scripting Vulnerability

Blogator-script 0.95 'bsauth.php' Cross Site Scripting Vulnerability. CVE-2008-1892. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28810/info Blogator-script is prone to a cross-site scripting vulnerability because it fails to adequately sanitize user-supplied input. A...

Sql injection

SQL injection vulnerability in blogadata/include/sondresult.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the idart parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the inclpage parameter in 1 structadmin.php, 2 structadminblog.php, and 3 structmain.php in blogadata/include...

CVE-2008-1760

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the inclpage parameter in 1 structadmin.php, 2 structadminblog.php, and 3 structmain.php in blogadata/include...

CVE-2008-1763

SQL injection vulnerability in blogadata/include/sondresult.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the idart parameter...

CVE-2008-1763

Blogator-script 0.95 contains a SQL injection in _blogadata/include/sond_result.php (often shown as sond_result.php) that allows remote attackers to execute arbitrary SQL commands by supplying the id_art parameter. This vulnerability is classified as high severity (CVSS v2 base score 7.5) with ne...

CVE-2008-1763

SQL injection vulnerability in blogadata/include/sondresult.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the idart parameter...

CVE-2008-1760

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the inclpage parameter in 1 structadmin.php, 2 structadminblog.php, and 3 structmain.php in blogadata/include...

CVE-2008-1760

CVE-2008-1760 affects Blogator-script prior to 1.01, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php inside _blogadata/include....