BlogPHP 2.0 - Remote Privilege Escalation Exploit

No description provided by source. !/usr/bin/perl BlogPHP 2.0 Remote Privilege Escalation Exploit Author : Cod3rZ Site : http://cod3rz.helloweb.eu Site : http://devilsnight.altervista.org Cuz We Back Rude This Time Privilege Escalation Send a request to...

BlogPHP 2 - (id) XSS / Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download :...

BlogPHP 1.2 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation...

BlogPHP 2.0 - index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/29133/info BlogPHP is prone to multiple input-validation vulnerabilities, including a cross-site scripting issue, an HTML-injection issue, and a cookie-manipulation issue. Attackers can exploit these issues to execute...

BlogPHP 1.0 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16269/info BlogPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could resu...

BlogPHP v2 Persistent XSS Vulnerability

No description provided by source. Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested...

BlogPHP v2 SQL Injection

Exploit for php platform in category web applications + Title : BlogPHP v2 SQL Injection + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Tested on : L:Vista & Windows Xp and Windows 7 + Dork ...

BlogPHP 2 Cross Site Scripting

Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...

BlogPHP v2 Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/downloa...

BlogPHP 2.0 - Persistent Cross-Site Scripting

Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version: v2 Tested on: CVE : How to exploit: 1- Go...

BlogPHP 2 Cross Site Scripting

Title : BlogPHP v2 search Xss Vulnerbility + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Software : http://amhserver.com/37/ & http://www.metjar.com/ + Tested on : L:Vista & Windows Xp and...

BlogPHP 2 SQL Injection

Title : BlogPHP v2 SQL Injection + Name : BlogPHP + Affected Version : v2 + Software Link : http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download + Tested on : L:Vista & Windows Xp and Windows 7 + Dork : Google Dork: "Copyright ©2006 Powered by...

BlogPHP 2.0 - Persistent Cross-Site Scripting

BlogPHP 2.0 - Persistent Cross-Site Scripting Exploit Title: BlogPHP v2 - XSS Google Dork: "Copyright ©2006 Powered by www.blogphp.net" Date: 09/08/2011 Author: Paul Maaouchy Paulzz Software Link: http://sourceforge.net/projects/blogphpscript/files/blogphpscript/2.0/BlogPHPv2.zip/download Version...

CVE-2008-6745

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action...

CVE-2008-6745

CVE-2008-6745 affects BlogPHP 2.0. The vulnerability exists in the register2 action where a crafted email parameter can cause remote attackers to gain administrator privileges. The provided documents state the impact as elevation of privileges to administrator but do not specify the underlying ro...

CVE-2008-6745: Improper Input Validation

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action...

CVE-2008-6631

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...

CVE-2008-6631

Software : BlogPHP 2.0 (index.php). Vulnerability : Multiple cross-site scripting (XSS) flaws in index.php allow injection of arbitrary script/HTML. Documented vectors include the (1) search parameter, and (2) user/username parameters in registration or sendmessage workflows; these are described ...

CVE-2008-6631: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 user parameter in a sendmessage action and the 2 username parameter when registering a new user, different vectors than CVE-2008-0679...