BlogPHP v.2 (id) XSS / Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================== BlogPHP v.2 id XSS / Remote SQL Injection Exploit =================================================== !/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS...

BlogPHP 2 - 'id' Cross-Site Scripting / SQL Injection

!/usr/bin/perl BlogPHP V.2 Multiple Remote Vulnerabilities SQL Injection Exploit/XSS AUTHOR : IRCRASH Discovered by : Dr.Crash Exploited By : Dr.Crash IRCRASH Team Members : Dr.Crash - Malc0de - R3d.w0rm Script Download : http://puzzle.dl.sourceforge.net/sourceforge/blogphpscript/BlogPHPv2.zip XS...

Sql injection

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

CVE-2006-0372

The CVE-2006-0372 entry concerns multiple SQL injection vulnerabilities in config.php of Insane Visions BlogPHP (likely version 1.0). The flaw allows remote attackers to inject arbitrary SQL via the blogphp_username or blogphp_password values stored in a cookie, enabling manipulation of the datab...

BlogPHP config.php SQL injection login bypass

--------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 12 Type: SQL Injection Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei -----------------Description--------------- Vulnerable scripts...

CVE-2006-0372: Undefined Security Weakness

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the 1 blogphpusername or 2 blogphppassword parameter in a cookie...

BlogPHP 1.2 - Multiple SQL Injections

BlogPHP 1.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

BlogPHP 1.2 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16340/info BlogPHP is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of th...

CVE-2006-0318

SQL injection vulnerability in index.php in BlogPHP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action...

CVE-2006-0318

SQL injection vulnerability in index.php in BlogPHP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action...

CVE-2006-0318

CVE-2006-0318 describes an SQL injection in BlogPHP 1.0, triggered in index.php when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action. This is the core impact stated in ...

CVE-2006-0318: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in BlogPHP 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action...

[eVuln] BlogPHP Authentication Bypass

New eVuln Advisory: BlogPHP Authentication Bypass http://evuln.com/vulns/34/summary/bt/ --------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class: Remote Status: Unpatched Exploit:...

[eVuln] microBlog SQL Injection Vulnerability

New eVuln Advisory: BlogPHP Authentication Bypass http://evuln.com/vulns/34/summary/bt/ --------------------Summary---------------- Software: BlogPHP Sowtware's Web Site: http://www.blogphp.net/ Versions: 1.0 Critical Level: Harmless Type: SQL Injection Class: Remote Status: Unpatched Exploit:...

BlogPHP 1.0 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/16269/info BlogPHP is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...