EUVD-2009-0407

Malware in sbrugna...

Design/Logic Flaw

Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions...

Sql injection

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0403

SQL injection vulnerability in admin/authenticate.php in Chipmunk Blogger Script allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-0399

Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions...

CVE-2009-0403

CVE-2009-0403 concerns a SQL injection vulnerability in the Chipmunk Blogger Script, specifically in admin/authenticate.php. The flaw allows remote attackers to inject SQL commands through the (1) username and (2) password parameters, enabling arbitrary SQL execution. The connected documents prov...