EUVD-2007-5007

Malware in sbrugna...

CVE-2014-9499

The CVE-2014-9499 entry applies to the Drupal contributed module Godwin’s Law (Drupal 7.x, vulnerable up to 7.x-1.0). The underlying issue is an XSS in the Watchdog/dblog integration, allowing remote authenticated users to inject arbitrary web script or HTML via a Watchdog message. The exploitabl...

SA-CONTRIB-2014-122 - MoIP - Cross Site Scripting (XSS)

This module enables you to use Moip a Brazilian payment method with Drupal Commerce. The module doesn't sufficiently filter the data passed by the automatic notifications, leaving the possibility for a malicious user to insert Cross Site Scripting xss attacks. This vulnerability is mitigated by t...

dBlog CMS - m SQL Injection

dBlog CMS - m SQL Injection source: https://www.securityfocus.com/bid/62146/info dBlog CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

dBlog CMS - 'm' SQL Injection

source: https://www.securityfocus.com/bid/62146/info dBlog CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

dBlog CMS SQL Injection

Exploit Title : dBlog CMS Sql injection vulnerability + Software link : www.dblog.it + Exploit Author : Ashiyane Digital Security Team + Tested on: Windows 7 , Linux + Google Dork : intext:"powered by dBlog CMS" + Date: 2013/09/01...

dblog (dblog.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : dblog +...

DBLog Database Disclosure

--------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : dblog + download :...

dblog - dblog.mdb Remote Database Disclosure

dblog - dblog.mdb Remote Database Disclosure --------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script :...

dblog - 'dblog.mdb' Remote Database Disclosure

--------------------------------------- dblog dblog.mdb Remote Database Disclosure Vulnerability --------------------------------------- + Author : AnTi SeCuRe + Email : [email protected] + Site : www.vxx9.cc + Team : SauDi ViRuS TeaM + Script : dblog + download :...

CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

Improper access control

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

CVE-2007-5026

dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing an admin password hash via a direct request for dblog.mdb...

CVE-2007-5026

CVE-2007-5026 affects dBlog CMS (likely version 2.0). The issue arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to directly request dblog.mdb and download the admin password hash database. Public details confirm the vulnerability d...

waraxe-2007-SA052.txt

waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...

[waraxe-2007-SA#052] - dBlog CMS Open Source database retrieval

waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...