Eggblog 3.1 Rss.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26408/info Eggblog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit

No description provided by source. !-- Eggblog = 3.x Multiple Remote Vulnerabilities Discovered by: nukedx Contacts: ICQ: 10072 MSN/Mail: [email protected] web: http://www.nukedx.com Original advisory can be found at: http://www.nukedx.com/?viewdoc=36 Eggblog = 3.0.6 rss/posts.php id Remote SQL...

Eggblog <= 3.1.0 Cookies Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = UnderWHAT?! ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog =...

EggBlog v4.X.X Arbitrary File Upload vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: EggBlog v4.X.X Arbitrary File Upload vulnerability + Date: 13-12-2013 + Category: WebApp + Vendor:http://sourceforge.net/projects/eggblog/ + Google Dork: Do Some Work and you'll find it : + Tested on:...

eggBlog 4.1.2 - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Expl0itation 1 - Google Dork:"powered by eggBlog.net" 2 - http://server/path/lib/openwysiwyg/addons/imagelibrary/insertimage.php?wysiwyg= 3 - http://server/path/photos/uploads/shell.php.jpg 0day.today 2018-03-19...

eggBlog Shell Upload

Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Tested on: Win8 Pro x64 Expl0itation 1 -...

EggBlog 4.1.2 - Arbitrary File Upload

EggBlog 4.1.2 - Arbitrary File Upload Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Test...

EggBlog 4.1.2 - Arbitrary File Upload

Exploit Title: eggBlog Arbitrary File Upload Vulnerability Google Dork:"powered by eggBlog.net" Date: 28/04/2013 Exploit Author: Pokk3rs Vendor Homepage: http://eggblog.net/ Software Link: http://sourceforge.net/projects/eggblog/files/eggBlog%204/v4.1.2/ Tested on: Win8 Pro x64 Expl0itation 1 -...

CVE-2011-3732

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

Information disclosure

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

CVE-2011-3732

EggBlog 4.1.2 is affected by an information-disclosure vulnerability where remote attackers can obtain sensitive data by directly requesting certain PHP files, causing an error message to reveal the installation path (e.g., _lib/fckeditor/editor/dialog/fck_spellerpages/spellerpages/server-scripts...

CVE-2011-3732

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

CVE-2011-3732: Exposure of Sensitive Information to an Unauthorized Actor

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by lib/fckeditor/editor/dialog/fckspellerpages/spellerpages/server-scripts/spellchecker.php and certain other files...

eggBlog &lt;= 4.1.1 Local Directory Transversal Exploit

No description provided by source. !/usr/bin/perl eggBlog = 4.1.1 Local Directory Transversal Exploit by Juri Gianni aka yeat - stakerathotmaildotit Visit http://zeroidentity.org Description ---------------------------------------------------- eggBlog contains one flaw that allows an attacker to...

EggBlog 4.1.1 - Local Directory Traversal

EggBlog 4.1.1 - Local Directory Traversal !/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig;...

eggBlog 4.1.1 Directory Traversal

!/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig; for my $i=0;$i=scalar@director;$i++ print $...

EggBlog 4.1.1 - Local Directory Traversal

!/usr/bin/perl eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imagelibrary/selectimage.php?dir=$param"; @director = $response-content = /.+?/ig; for my $i=0;$i=scalar@director;$i++ print $director$i."\n";...

eggBlog <= 4.1.1 Local Directory Transversal Exploit

Exploit for unknown platform in category web applications ==================================================== eggBlog agent'Lynx textmode'; $lib-timeout5; $response = $lib-get"http://$domain/lib/openwysiwyg/addons/imageli...

EggBlog 3.1.10 XSRF Vulnerability

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^...

EggBlog 3.1.10 Change Admin Pass CSRF Vulnerability

No description provided by source. | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: html titlex0r :P /title form id="forum-form" name="forumform" method="post" action="http://site/path/change.php" input type="hidden" size="30" id="forumpassword"...