CVE-2017-6446

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

PT-2017-17072

Name of the Vulnerable Software and Affected Versions Dotclear version 2.11.2 Description A cross-site scripting issue was found, affecting the "admin/blogs.php" and "admin/users.php" API endpoints, specifically the sortby and order parameters. Recommendations For Dotclear version 2.11.2, conside...

CVE-2017-6446: Improper Neutralization of Input During Web Page Generation

XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters...

CVE-2012-1039

Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...

CVE-2012-1039: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Dotclear before 2.4.2 allow remote attackers to inject arbitrary web script or HTML via the 1 logindata parameter to admin/auth.php; 2 nb parameter to admin/blogs.php; 3 type, 4 sortby, 5 order, or 6 status parameters to admin/comments.php; or ...

PT-2012-3036

Name of the Vulnerable Software and Affected Versions Dotclear versions prior to 2.4.2 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters, including the login data parameter to "admin/auth.php", the nb parameter to...

ArticleLive SQL Injection

Author : Baybora Product : ArticleLive Interspire Website Publisher Version : NX.1.7.1.2 and possibly earlier versions Download : http://www.interspire.com/ Price : $ 249 Site : www.1923turk.biz Vulnerable script: blogs.php?Id = SQL-injection...

CVE-2008-4671: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-admin/wp-blogs.php in Wordpress MU WPMU before 2.6 allows remote attackers to inject arbitrary web script or HTML via the 1 s and 2 ipaddress parameters...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in EncapsCMS 0.3.6 allow remote attackers to execute arbitrary PHP code via a URL in the 1 configpath parameter to a commonfoot.php or b blogs.php, or 2 the configtheme parameter to c admin/galleryhead.php...