ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities

No description provided by source. ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE...

ApPHP MicroBlog 1.0.1 - Remote Command Execution Exploit

No description provided by source. !/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1 Free Version...

microBlog 2.0 Index.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/16270/info microBlog is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitatio...

WordPress Microblog Plugin <= 0.4.0 - XSS

Because of this vulnerability in get.php, the attackers can inject arbitrary web script or HTML via the "oauthverifier" parameter. Solution Update the plugin...

ApPHP MicroBlog 1.0.1 - Remote Command Execution

ApPHP MicroBlog 1.0.1 - Remote Command Execution !/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1...

ApPHP MicroBlog 1.0.1 - Remote Command Execution

!/usr/bin/python import random import hashlib import urllib from base64 import b64encode as b64 import sys import re Exploit Title: Python exploit for ApPHP MicroBlog 1.0.1 Free Version - RCE Exploit Author: LOTFREE Version: ApPHP MicroBlog 1.0.1 Free Version EDB-ID: 33030 print " -= LOTFREE...

ApPHP MicroBlog 1.0.1 - Multiple Vulnerability (LFI/RCE) Vulnerabilities

Exploit for php platform in category web applications ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RC...

ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities

ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities ----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE...

ApPHP MicroBlog 1.0.1 - Multiple Vulnerabilities

----------exploit Debut Multiple Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com ----------Script Info Site : http://www.apphp.com Download : http://www.apphp.com/downloadsfree/phpmicroblog101.zip ----------exploit Info RCE http://path/index.php?jiko;systemdir=/ LFI...

CVE-2011-3756

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

Information disclosure

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

CVE-2011-3756

Summary: CVE-2011-3756 affects MicroBlog 0.9.5. The vulnerability enables information disclosure by directly requesting a PHP file (e.g., init.php), causing an error message that reveals the installation path. This is a server-side information leakage issue that exposes sensitive path information...

CVE-2011-3756

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files...

SA-CONTRIB-2010-020 - Facebook-style Statuses (Microblog) - Access bypass

The Facebook-style Statuses Microblog module enables each user to have a stream of messages "statuses" like on Facebook. Users can update their own status as well as write messages to other users by visiting the other user's profile. When a user updates his own status and then updates it again...

Cross site scripting

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

Sql injection

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

CVE-2006-0233

Cross-site scripting XSS vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a url BBcode tag...

CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the 1 month and 2 year parameters...

[eVuln] microBlog SQL Injection Vulnerability

New eVuln Advisory: microBlog SQL Injection Vulnerability http://evuln.com/vulns/35/summary/bt/ --------------------Summary---------------- Software: microBlog Sowtware's Web Site: http://www.stamcar.com/projekti/microblog/ Versions: 2.0 RC-10 Critical Level: Moderate Type: SQL Injection Class:...