4 matches found
CVE-2008-2562
SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...
CVE-2008-2562
PowerPhlogger 2.2.5 and earlier is affected by an SQL injection in edCss.php, exploitable via the css_str parameter in an edit action. The flaw allows remote authenticated users to execute arbitrary SQL commands. Affected component: edCss.php (PowerPhlogger). Root cause: improper handling of inpu...
CVE-2008-2562: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in edCss.php in PowerPhlogger 2.2.5 and earlier allows remote authenticated users to execute arbitrary SQL commands via the cssstr parameter in an edit action...
Power Phlogger 2.2.5 - 'css_str' SQL Injection
SQL Injection vulnerability in Power Phlogger By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2158/ Description: SQL Injection vulnerability in Power Phlogger it is PHP/MySQL logging tool via counters. To make SQL Injection attack you need to be logged into...