CVE-2009-0409

SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

Server side request forgery (ssrf)

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request...

CVE-2009-0383

delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request...

Max.Blog 1.0.6 - submit_post.php SQL Injection

Max.Blog 1.0.6 - submitpost.php SQL Injection Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author:...

Max.Blog 1.0.6 - show_post.php SQL Injection

Max.Blog 1.0.6 - showpost.php SQL Injection Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 20 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author:...

Max.Blog 1.0.6 Delete Post Exploit

Max.Blog 1.0.6 Delete Post Exploit Max.Blog 1.0.6 Delete Post Exploit Discovered by SirGod Thanks to Nytro Please visit : ------------------------ www.mortal-team.org ------------------------ www.h4cky0u.org ------------------------ www.xpl0it.info ------------------------ www.anti-intruders.org...

Max.Blog 1.0.6 Arbitrary Delete Post Exploit

No description provided by source. html head titleMax.Blog 1.0.6 Delete Post Exploit/title /head body p align="center" bMax.Blog 1.0.6 Delete Post Exploit/bbr /br / bDiscovered by bSirGod/bbr / Thanks to bNytro/bbr / Please visit : br / ------------------------br / www.mortal-team.orgbr /...

Max.Blog 1.0.6 - Arbitrary Delete Post

Max.Blog 1.0.6 - Arbitrary Delete Post Max.Blog 1.0.6 Delete Post Exploit Max.Blog 1.0.6 Delete Post Exploit Discovered by SirGod Thanks to Nytro Please visit : ------------------------ www.mortal-team.org ------------------------ www.h4cky0u.org ------------------------ www.xpl0it.info...

Max.Blog 1.0.6 - Arbitrary Delete Post

Max.Blog 1.0.6 Delete Post Exploit Max.Blog 1.0.6 Delete Post Exploit Discovered by SirGod Thanks to Nytro Please visit : ------------------------ www.mortal-team.org ------------------------ www.h4cky0u.org ------------------------ www.xpl0it.info ------------------------ www.anti-intruders.org...