Cross site scripting

Cross-site scripting XSS vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176...

CVE-2008-3884

Blogn (BURO GUN) has multiple XSS-related CVEs described across sources. CVE-2006-6176 targets admin.php in Blogn before 1.9.4, allowing remote injection of arbitrary script/HTML via unspecified parameters. CVE-2008-3884 affects Blogn v1.9.7 and earlier, with XSS via unspecified vectors and notes...

CVE-2008-3885: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications. NOTE: some of these details are obtained from third party information...

CVE-2008-3884: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Blogn BURO GUN 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176...

CVE-2008-3090: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in BlognPlus BURO GUN + 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the 1 p, 2 e, 3 d, and 4 m parameters, a different vulnerability than CVE-2008-2819...

CVE-2008-2819

BlognPlus (BURO GUN +) has an SQL injection vulnerability affecting v2.5.4 and earlier for MySQL and PostgreSQL. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, potentially enabling administrative access to blogs. Related connected sources (JVN DB and ...

CVE-2008-2819: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in BlognPlus BURO GUN + 2.5.4 and earlier MySQL and PostgreSQL editions allows remote attackers to execute arbitrary SQL commands via unspecified vectors...