36 matches found
EUVD-2019-17125
Malware in sbrugna...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
Bo-blog Wind CMS ad***.mo***.php page suffers from SQL injection vulnerability
Bo-blog Wind BW for short is a lightweight personal blogging program. A SQL injection vulnerability exists in the Bo-blog Wind CMS ad.mo.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
Sql injection
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
CVE-2019-7587 affects Bo-blog Wind through 1.6.0-r. The vulnerability is a SQL Injection in the admin.php/comments/batchdel/ comID parameter, caused by mishandling in the mode/admin.mode.php delBlockedBatch function. The connected sources corroborate the issue and describe it as a SQL injection v...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587: Improper Neutralization of Special Elements used in an SQL Command
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
PT-2019-18659
Name of the Vulnerable Software and Affected Versions Bo-blog Wind versions through 1.6.0-r Description The issue allows SQL Injection via the comID parameter in the "admin.php/comments/batchdel/" endpoint because this parameter is mishandled in the delBlockedBatch function in mode/admin.mode.php...
Bo-Blog 2.1.1 usergroup参数 跨站脚本攻击漏洞
No description provided by source...
Bo-blog 2.1.1 xmlrpc.php 上传漏洞
No description provided by source...
Bo-Blog 2.1.1 - Cross-Site Scripting SQL Injection
Bo-Blog 2.1.1 - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/61880/info Bo-Blog is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to...
Bo-Blog 2.1.1 Cross Site Scripting / SQL Injection
Exploit Title : Bo-Blog 2.1.1 Multiple Vulnerabilites Exploit Author : Ashiyane Digital Security Team Official site : http://www.bo-blog.com/ Tested on: Windows,Linux /////////////////////////////////////////////// Google Dork : intext:"Powered by Bo-Blog 2.1.1"...
Bo-Blog 2.1.1 - Cross-Site Scripting / SQL Injection
source: https://www.securityfocus.com/bid/61880/info Bo-Blog is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary code in the context of the browser,...
Bo-Blog tag.php跨站漏洞
tag.php中的mode变量过滤不严，导致xss存在 攻击者可窃取用户cookie或者构造CSRF。 0 Bo-Blog 2.1.1 inc/modtag.php里的第61行 acceptrequest'mode'; 之后，加上 $mode = intval$mode;...
bo-blog xss vulnerability-vulnerability warning-the black bar safety net
Bo-Blog is an domestic excellent open source blogging, wordpress and other blog Bo-Blog the advantage of easy to use, convenient, efficiency is high. If wordpress is the professional blogging program so Bo-blog is a civilian blog. Bo-blog The advantages and disadvantages are obvious, the...