eggblog-sql.txt

New eVuln Advisory: eggblog Multiple SQL Injection & XSS Vulnerabilities http://evuln.com/vulns/39/summary/bt/ --------------------Summary---------------- Software: eggblog Sowtware's Web Site: http://www.epicdesigns.co.uk/projects/eggblog Versions: 2.0 Critical Level: Moderate Type: Multiple...

[eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities

New eVuln Advisory: eggblog Multiple SQL Injection & XSS Vulnerabilities http://evuln.com/vulns/39/summary/bt/ --------------------Summary---------------- Software: eggblog Sowtware's Web Site: http://www.epicdesigns.co.uk/projects/eggblog Versions: 2.0 Critical Level: Moderate Type: Multiple...

CVE-2006-0349

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php...

CVE-2006-0350

Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...

Cross site scripting

Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...

Sql injection

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php...

CVE-2006-0350

The CVE-2006-0350 entry concerns an XSS vulnerability in eggblog 2.0. The flaw allows remote attackers to inject arbitrary Web script or HTML via the message field to topic.php. NVD records a base score of 4.3 (MEDIUM) with network attack vector, no confidentiality or availability impact, and par...

CVE-2006-0350

Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...

CVE-2006-0349

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php...

CVE-2006-0349

CVE-2006-0349 describes an SQL injection in eggblog 2.0, where the attacker can cause arbitrary SQL execution through the id parameter in blog.php. The vulnerability arises from unsafe handling of user input in a database query, enabling potential data disclosure, modification, or other SQL-based...

CVE-2006-0349: Undefined Security Weakness

SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php...

CVE-2006-0350: Undefined Security Weakness

Cross-site scripting XSS vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php...

EggBlog 2.0 - 'message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16305/info Eggblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

EggBlog 2.0 - message Cross-Site Scripting

EggBlog 2.0 - message Cross-Site Scripting source: https://www.securityfocus.com/bid/16305/info Eggblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these...

EggBlog 2.0 - id SQL Injection

EggBlog 2.0 - id SQL Injection source: https://www.securityfocus.com/bid/16305/info Eggblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could...

EggBlog 2.0 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/16305/info Eggblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of the...

CVE-2005-4546

search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...

CVE-2005-4547

Cross-site scripting XSS vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword and Search fields...

CVE-2005-4546

CVE-2005-4546 affects eggblog 2.0: the search.php module exposes the server full path to remote attackers via an invalid q parameter, with the description suggesting a possible SQL injection trigger. The concrete impact stated is path disclosure; no additional exploit details are provided in the ...

CVE-2005-4546

search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vulnerability...