EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

| | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

EggBlog 3.1.10 - Cross-Site Request Forgery (Change Admin Password)

EggBlog 3.1.10 - Cross-Site Request Forgery Change Admin Password | | | Project: EggBlog v 3.1.10 | | Author: x0r | | Email: andry2000athotmaildotit | || Code: x0r :P document.forumform.submit With this csrf you can change the admin pass ^ ^ milw0rm.com 2009-01-01...

CVE-2008-1626

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159...

Sql injection

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159...

CVE-2008-1626

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159...

CVE-2008-1626

EggBlog vulnerability CVE-2008-1626: SQL injection in eggBlog before 4.0.1 via an unspecified cookie, allowing remote SQL queries. Related entries (NASL/NVD) describe cookie parameters such as eb_login and eggblogpassword as injection points. Affected product is eggBlog (PHP-MySQL), vulnerable co...

eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit

No description provided by source. Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password...

eggBlog _lib/user.php eb_login Function Cookie Handling SQL Injection

The remote host is running eggBlog, a free PHP and MySQL blog software package. The version of eggBlog installed on the remote host fails to sanitize input to the 'email' and 'password' cookies before using it in the 'eblogin' function in 'lib/user.php' to perform database queries. Provided PHP's...

eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== eggBlog 4.0 Password Retrieve Remote SQL Injection Exploit ========================================================== Author: GiReX Date: 27/03/2008 - 1/04/2008 Added exploit for...

EggBlog 4.0 - SQL Injection

EggBlog 4.0 - SQL Injection Author: GiReX mySite: girex.altervista.org Date: 27/03/2008 - 1/04/2008 Added exploit for str0ke CMS: eggBlog 4.0 Site: eggblog.net Bug: SQL Injection cookie vars Type: 1 - Admin/User Authentication Bypass Bug2: Blind SQL Injection same vars-query Type: Password retrie...

eggBlog index.php eggblogpassword Parameter Cookie SQL Injection

The remote host is running eggBlog, a free PHP and MySQL blog software package. The version of eggBlog installed on the remote host fails to sanitize input to the 'eggblogpassword' cookie before using it in 'etc/header.php' to construct database queries. Provided PHP's 'magicquotesgpc' setting is...

CVE-2008-0159

SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie...

Sql injection

SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie...

CVE-2008-0159

SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie...

CVE-2008-0159

EggBlog flaw (CVE-2008-0159): SQL injection in index.php through the eggblogpassword cookie affects eggBlog versions 3.1.0 and earlier. An attacker can influence database queries, enabling potential data disclosure, authentication bypass, or data modification as described by the Nessus plugin; no...

Eggblog <= 3.1.0 Cookies Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog =...

EggBlog 3.1.0 - Cookies SQL Injection

!/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...

Eggblog <= 3.1.0 Cookies Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================== Eggblog "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblog 'Tahoma 7...

EggBlog 3.1.0 - Cookies SQL Injection

EggBlog 3.1.0 - Cookies SQL Injection !/usr/bin/perl use Tk; use Tk::BrowseEntry; use Tk::DialogBox; use LWP::UserAgent; $mw = new MainWindowtitle = "UnderWHAT?!" ; $mw-geometry '420x343' ; $mw-resizable0,0; $mw-Label-text = '', -font = 'Verdana 8',-foreground='red'-pack; $mw-Label-text = 'eggblo...

Cross site scripting

Cross-site scripting XSS vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...