EUVD-2006-1127

Malware in sbrugna...

EUVD-2006-1126

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-1123

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie...

CVE-2006-1122

Cross-site scripting XSS vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

Sql injection

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie...

CVE-2006-1123

The CVE covers a SQL injection in D2KBlog 1.0.3 and earlier, exploitable via the memName cookie parameter. Root cause: unsafely constructed SQL using cookie data, enabling remote execution of arbitrary SQL commands. Impact is high (complete confidentiality, integrity, and availability) per the CV...

CVE-2006-1123

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie...

CVE-2006-1122

Cross-site scripting XSS vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter...

CVE-2006-1122

CVE-2006-1122 describes a cross-site scripting (XSS) vulnerability in Default.asp of D2KBlog 1.0.3 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the msg parameter. Affected software is D2KBlog prior to or at version 1.0.3; root cause is improper handling of us...

d2kBlog 1.0.3 (memName) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w D2KBLOG SQL injection Discovered by : Farhad Koosha farhadkey at kapda.ir Exploited by : devilbox devilbox at kapda.ir member of : Kapda.ir - Security Science Researchers Institute of Iran persianhacker.net require LWP::UserAgent; require...