21 matches found
EUVD-2008-0688
Malware in sbrugna...
EUVD-2008-0689
Malware in sbrugna...
BlogPHP 2.0 - index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can exploit these issues to execute...
BlogPHP 2.0 - Persistent XSS Vulnerability
No description provided by source...
BlogPHP 2.0 - Remote Privilege Escalation Exploit
No description provided by source. !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to...
BlogPHP 2.0 - Persistent Cross-Site Scripting
Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...
BlogPHP 2.0 - Persistent Cross-Site Scripting
BlogPHP 2.0 - Persistent Cross-Site Scripting Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version...
CVE-2008-6745
index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action...
CVE-2008-6745
CVE-2008-6745 affects BlogPHP 2.0. The vulnerability exists in the register2 action where a crafted email parameter can cause remote attackers to gain administrator privileges. The provided documents state the impact as elevation of privileges to administrator but do not specify the underlying ro...
CVE-2008-6631
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
CVE-2008-6631
Software : BlogPHP 2.0 (index.php). Vulnerability : Multiple cross-site scripting (XSS) flaws in index.php allow injection of arbitrary script/HTML. Documented vectors include the (1) search parameter, and (2) user/username parameters in registration or sendmessage workflows; these are described ...
BlogPHP 2.0 Remote Privilege Escalation Exploit
Exploit for unknown platform in category web applications =============================================== BlogPHP 2.0 Remote Privilege Escalation Exploit =============================================== !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Cuz We Back Rude...
CVE-2008-2524
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
Authentication flaw
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
CVE-2008-2524
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
Sql injection
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...
CVE-2008-0678
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...
CVE-2008-0678
CVE-2008-0678 affects BlogPHP 2.0; an SQL injection in index.php via the id parameter in a page action allows remote execution of arbitrary SQL commands. The provided documents do not specify a patch/version for remediation; exploitation details are not described in the connected documents. The C...
CVE-2008-0678
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...
CVE-2008-0679
Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...