EUVD-2006-2029

Malware in sbrugna...

CVE-2006-2029

CVE-2006-2029 affects Jeremy Ashcraft’s Simplog, version 0.9.3 and earlier. The issue comprises multiple SQL injection vulnerabilities that let remote attackers execute arbitrary SQL commands via the following parameters: (a) tid in preview.php; (b) cid, pid, eid in archive.php; and (c) pid in co...

CVE-2006-2028

The CVE-2006-2028 entry concerns a Cross-site Scripting (XSS) vulnerability in imagelist.php of Jeremy Ashcraft Simpleg 0.9.3 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the imagedir parameter, with note that it may stem from directory traversal. Affected so...

CVE-2006-1779

Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...

CVE-2006-1778

CVE-2006-1778 affects Simplog

CVE-2006-1779

CVE-2006-1779 describes a Cross-site scripting (XSS) vulnerability in Simplog 0.9.2 and earlier, specifically in login.php where the btag parameter can be used to inject arbitrary script/HTML. Affected product: Simplog (Jeremy Ashcraft) <= 0.9.2. Attack vector from the description is a remote ...