222 matches found
BlogPHP 2 Cross Site Scripting
Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...
BlogPHP v2 Persistent XSS Vulnerability
Exploit for php platform in category web applications Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/downloa...
BlogPHP 2.0 - Persistent Cross-Site Scripting
Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...
BlogPHP 2.0 - Persistent Cross-Site Scripting
BlogPHP 2.0 - Persistent Cross-Site Scripting Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version...
BlogPHP 2 SQL Injection
Title : BlogPHP v2 SQL Injection + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Tested on : L:Vista & Windows Xp and Windows 7 + Dork : Google Dork: "Copyright ©2006 Powered by...
BlogPHP 2 Cross Site Scripting
Title : BlogPHP v2 search Xss Vulnerbility + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Software : http://amhserver.com/37/ & http://www.metjar.com/ + Tested on : L:Vista & Windows Xp and...
CVE-2008-6745
index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action...
CVE-2008-6745
CVE-2008-6745 affects BlogPHP 2.0. The vulnerability exists in the register2 action where a crafted email parameter can cause remote attackers to gain administrator privileges. The provided documents state the impact as elevation of privileges to administrator but do not specify the underlying ro...
CVE-2008-6631
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...
CVE-2008-6631
Software : BlogPHP 2.0 (index.php). Vulnerability : Multiple cross-site scripting (XSS) flaws in index.php allow injection of arbitrary script/HTML. Documented vectors include the (1) search parameter, and (2) user/username parameters in registration or sendmessage workflows; these are described ...
BlogPHP 2.0 Remote Privilege Escalation Exploit
Exploit for unknown platform in category web applications =============================================== BlogPHP 2.0 Remote Privilege Escalation Exploit =============================================== !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Cuz We Back Rude...
Authentication flaw
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
CVE-2008-2524
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
CVE-2008-2524
BlogPHP 2.0 allows remote attackers to bypass authentication, and post 1 messages or 2 comments as an arbitrary user, via a modified blogphpusername field in a cookie...
CVE-2008-2524
BlogPHP 2.0 contains an authentication bypass vulnerability where a remote attacker can set a modified blogphp_username cookie to post messages or comments as an arbitrary user. Root cause: cookie field manipulation bypasses login checks. Affected product: BlogPHP 2.0. Practical impact: unauthori...
BlogPHP 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities
BlogPHP 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can...
BlogPHP 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can exploit these issues to execute arbitrary script code in the context ...