7 matches found
EUVD-2006-2029
Malware in sbrugna...
CVE-2006-2028
The CVE-2006-2028 entry concerns a Cross-site Scripting (XSS) vulnerability in imagelist.php of Jeremy Ashcraft Simpleg 0.9.3 and earlier. The issue allows remote attackers to inject arbitrary script/HTML via the imagedir parameter, with note that it may stem from directory traversal. Affected so...
CVE-2006-2029
CVE-2006-2029 affects Jeremy Ashcraft’s Simplog, version 0.9.3 and earlier. The issue comprises multiple SQL injection vulnerabilities that let remote attackers execute arbitrary SQL commands via the following parameters: (a) tid in preview.php; (b) cid, pid, eid in archive.php; and (c) pid in co...
Cross site scripting
Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...
CVE-2006-1779
Cross-site scripting XSS vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter...
CVE-2006-1779
CVE-2006-1779 describes a Cross-site scripting (XSS) vulnerability in Simplog 0.9.2 and earlier, specifically in login.php where the btag parameter can be used to inject arbitrary script/HTML. Affected product: Simplog (Jeremy Ashcraft) <= 0.9.2. Attack vector from the description is a remote ...