CVE-2008-0679

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2008-0678

CVE-2008-0678 affects BlogPHP 2.0; an SQL injection in index.php via the id parameter in a page action allows remote execution of arbitrary SQL commands. The provided documents do not specify a patch/version for remediation; exploitation details are not described in the connected documents. The C...

CVE-2008-0679

CVE-2008-0679 describes a reflected XSS in BlogPHP 2.0's index.php via the search parameter. The vulnerability affects BlogPHP 2.0 and can allow injection of arbitrary script/HTML. The provided documents do not specify a patch or workaround; no exploitation status is given. Related entries (CVE-2...

CVE-2008-0678

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action...

CVE-2008-0679

Cross-site scripting XSS vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

blogphp-sql.txt

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH...

BlogPHP 2 - id Cross-Site Scripting SQL Injection

BlogPHP 2 - id Cross-Site Scripting SQL Injection !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== BlogPHP v.2 id XSS / Remote SQL Injection Exploit =================================================== !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS...

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

Sql injection

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

The CVE-2006-0372 entry concerns multiple SQL injection vulnerabilities in config.php of Insane Visions BlogPHP (likely version 1.0). The flaw allows remote attackers to inject arbitrary SQL via the blogphp_username or blogphp_password values stored in a cookie, enabling manipulation of the datab...

BlogPHP config.php SQL injection login bypass

--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...

BlogPHP 1.2 - Multiple SQL Injections

BlogPHP 1.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

BlogPHP 1.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of th...

CVE-2006-0318

SQL injection vulnerability in index.php in BlogPHP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action...

CVE-2006-0318

SQL injection vulnerability in index.php in BlogPHP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action...

CVE-2006-0318

CVE-2006-0318 describes an SQL injection in BlogPHP 1.0, triggered in index.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action. This is the core impact stated in ...

[eVuln] BlogPHP Authentication Bypass

New eVuln Advisory: BlogPHP Authentication Bypass http://evuln.com/vulns/34/summary/bt/ --------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class: Remote Status: Unpatched Exploit:...