geoBlog MOD_1.0 deletecomment.php id Variable Remote Arbitrary Comment Deletion

No description provided by source. source: http://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploit these issues to delete blogs...

CVE-2009-4089

Telepark.wiki versions 2.4.23 and earlier are affected. Affected component: ajax/deletePage.php (modified pageID) allows deletion of arbitrary pages; ajax/deleteComment.php (modified pageID) allows deletion of arbitrary comments. Root cause: insufficient access control in Telepark.wiki web endpoi...

CVE-2009-4089: Improper Authentication

telepark.wiki 2.4.23 and earlier allows remote attackers to bypass authorization and 1 delete arbitrary pages via a modified pageID parameter to ajax/deletePage.php or 2 delete arbitrary comments via a modified pageID parameter to ajax/deleteComment.php...

CVE-2007-4047: Undefined Security Weakness

geoBlog aka BitDamaged 1 does not require authentication for 1 deletecomment.php, 2 deleteblog.php, and 3 listcomment.php in admin/, which allows remote attackers to delete arbitrary comments, delete arbitrary blogs, and have other unspecified impact via a request with a valid id parameter...

GeoBlog MOD_1.0 - deletecomment.php?id Arbitrary Comment Deletion

GeoBlog MOD1.0 - deletecomment.php?id Arbitrary Comment Deletion source: https://www.securityfocus.com/bid/24966/info geoBlog is prone to multiple security-bypass vulnerabilities because the application fails to properly validate users when deleting user blogs and comments. An attacker may exploi...