70 matches found
CVE-2006-2978
Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to 1 big.php and 2 upgrade.php...
CVE-2006-2977
The CVE-2006-2977 entry covers an SQL injection vulnerability in Mafia Moblog 0.6M1 and earlier, where the affected component is big.php. The underlying issue allows remote attackers to craft requests (via the img parameter) that cause the application to execute arbitrary SQL commands. Documents ...
CVE-2006-2978
Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to 1 big.php and 2 upgrade.php...
CVE-2006-2978
CVE-2006-2978 affects Mafia Moblog 0.6M1 and earlier. The issue allows remote attackers to disclose the installation path via an error message triggered by direct requests to (1) big.php and (2) upgrade.php. No additional exploit details or impact beyond path disclosure are provided in the docume...
CVE-2006-2977
SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter...
mafiamoblog.txt
Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...
Mafia Moblog Full Path Disclosure / SQL injection
Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...
CVE-2005-1169
Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php...
CVE-2005-1169
CVE-2005-1169 affects the Mafia Blog .4 BETA package, where the admin directory is not properly protected. This allows remote attackers to execute arbitrary PHP code by abusing writeinfo.php to inject code into info.php. The flaw enables arbitrary code execution with no authentication required an...