EUVD-2006-5959

Malware in sbrugna...

blogme 3.0 (xss/auth bypass) Multiple Vulnerabilities

No description provided by source...

CVE-2007-2661

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976...

Sql injection

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976...

CVE-2007-2661

BlogMe 3.0 (archshow.asp) is affected by a SQL injection vulnerability exposed via the var parameter, enabling remote attackers to execute arbitrary SQL commands. This CVE is distinct from CVE-2006-5976. Public exploit references exist (e.g., Exploit-DB), indicating practical exploitability; howe...

CVE-2007-2661

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976...

BlogMe 3.0 (archshow.asp var) Remote SQL Injection Vulnerability

No description provided by source. Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin...

BlogMe 3.0 - archshow.asp?var SQL Injection

BlogMe 3.0 - archshow.asp?var SQL Injection Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin...

BlogMe 3.0 (archshow.asp var) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ BlogMe 3.0 archshow.asp var Remote SQL Injection Vulnerability ================================================================ Discoveredby:gsy&kerem125...

BlogMe 3.0 - 'archshow.asp?var' SQL Injection

Discoveredby:gsy&kerem125 Website:www.kerem125.com ScriptDownload:http://www.drumster.net/gamma/products.asp must buy exploit:/blogme/archshow.asp?var=-99%20Union+all+select+0,1,2,3,4,username,password,7,8,9,10,0+from+admin contact:[email protected]&[email protected]...

CVE-2006-5975

Multiple cross-site scripting XSS vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 URL, or 3 Comments field...

CVE-2006-5976

Multiple SQL injection vulnerabilities in adminlogin.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: some of these details are obtained from third party information...

EUVD-2006-5958

Multiple cross-site scripting XSS vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 URL, or 3 Comments field...

CVE-2006-5975

Multiple cross-site scripting XSS vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 URL, or 3 Comments field...

CVE-2006-5976

Multiple SQL injection vulnerabilities in adminlogin.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: some of these details are obtained from third party information...

CVE-2006-5976

CVE-2006-5976 describes multiple SQL injection vulnerabilities in BlogMe 3.0 affecting the admin_login.asp page. The vulnerability allows remote attackers to insert or modify SQL statements through the (1) Username or (2) Password fields, enabling arbitrary SQL execution. This is a remote, unauth...

CVE-2006-5975

CVE-2006-5975 describes multiple cross-site scripting (XSS) vulnerabilities in the BlogMe 3.0 system, specifically in comments.asp, exploitable via the Name, URL, or Comments fields. The issue allows remote attackers to inject arbitrary script/HTML. Documented impact is limited to the reported XS...

BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities

No description provided by source. blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - U...

BlogMe 3.0 (XSS/Auth Bypass) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ BlogMe 3.0 XSS/Auth Bypass Multiple Remote Vulnerabilities ============================================================ blogme v3 admin login bypass & xss post vendor...

blogme 3.0 - Cross-Site Scripting / Authentication Bypass

blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - URL - Comments laurent gaffié &...