CVE-2020-36972

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

CVE-2020-36972

CVE-2020-36972 affects SmartBlog 2.0.1. The details controller’s id_post parameter is vulnerable to blind SQL injection, allowing an attacker to extract database information by character-by-character comparison via crafted SQL queries. This is the core vulnerability described across multiple sour...

CVE-2020-36972: Improper Neutralization of Special Elements used in an SQL Command

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'idpost' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare...

EUVD-2013-3473

Malware in sbrugna...

SmartBlog 2.0.1 Blind SQL Injection

Exploit Title: SmartBlog 2.0.1 - 'idpost' Blind SQL injection Date: 2020-11-05 Exploit Author: C0wnuts Vendor Homepage: https://github.com/smartdatasoft/smartblog Version: 2.0.1 Tested on: Linux Description : A blind SQL injection is present in the "idpost" parameter of the "details" controller. ...

SmartBlog 2.0.1 - 'id_post' Blind SQL injection

Exploit Title: SmartBlog 2.0.1 - 'idpost' Blind SQL injection Date: 2020-11-05 Exploit Author: C0wnuts Vendor Homepage: https://github.com/smartdatasoft/smartblog Version: 2.0.1 Tested on: Linux Description : A blind SQL injection is present in the "idpost" parameter of the "details" controller. ...

CVE-2013-3537: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 idpost or 2 pg parameter...

CVE-2013-3538: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 idpost or 2 pg parameter...

Todoo Forum 2.0 Cross Site Scripting / SQL Injection

SQL Injection + Parameter : idpost + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=Injecthere&pg=1 + Parameter : pg + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=1&pg=InjectHere + Cross-site scripting + Parameter : idpost +...

Todoo Forum v2.0 - Multiple Vulnerabilities

Exploit for windows platform in category web applications + SQL Injection + Parameter : idpost + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=Injecthere&pg=1 + Parameter : pg + http://localhost/todooforum/todooforum.php?cat=reponse&idforum=0&idpost=1&pg=InjectHere +...