EUVD-2008-6765

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

CVE-2008-6805

CVE-2008-6805 affects Mic_Blog 0.0.3. When magic_quotes_gpc is disabled, remote attackers can cause SQL injection via (1) cat in category.php, (2) user in login.php, and (3) site in register.php, leading to arbitrary SQL execution. CVSS v2 base score is 6.8 (MEDIUM); attack vector is NETWORK, wit...

CVE-2008-6805: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MicBlog 0.0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter to category.php, the 2 user parameter to login.php, and the 3 site parameter to register.php...

micblog-sql.txt

!/usr/bin/php -q ?php errorreporting0; iniset"defaultsockettimeout",5; / Micblog v0.0.3 Multiple Remote Exploit ------------------------------------------------------------- Discovered By StAkeR aka athos - StAkeRathotmaildotit Discovered On 16/10/2008...