CVE-2006-2977: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter...

CVE-2006-2978: Undefined Security Weakness

Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to 1 big.php and 2 upgrade.php...

Mafia Moblog Full Path Disclosure / SQL injection

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

e-moBLOG.txt

New eVuln Advisory: e-moBLOG SQL Injection Vulnerability http://evuln.com/vulns/43/summary.html --------------------Summary---------------- Software: e-moBLOG Sowtware's Web Site: http://www.e-motionalis.net/ Versions: 1.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remote Status:...

Sql injection

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

CVE-2006-0403

CVE-2006-0403 affects e-moBLOG 1.3 with multiple SQL injection vulnerabilities exploitable via the (1) monthy parameter to index.php and (2) login parameter to admin/index.php. Remote attackers could execute arbitrary SQL commands. Root cause described as improper handling of user input leading t...

CVE-2006-0403: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 monthy parameter to index.php or 2 login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect...

[eVuln] e-moBLOG SQL Injection Vulnerability

New eVuln Advisory: e-moBLOG SQL Injection Vulnerability http://evuln.com/vulns/43/summary.html --------------------Summary---------------- Software: e-moBLOG Sowtware's Web Site: http://www.e-motionalis.net/ Versions: 1.3 Critical Level: Moderate Type: Cross-Site Scripting Class: Remote Status:...

e-moBLOG 1.3 - Multiple SQL Injections

e-moBLOG 1.3 - Multiple SQL Injections source: https://www.securityfocus.com/bid/16344/info The e-moBLOG application is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

e-moBLOG 1.3 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/16344/info The e-moBLOG application is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an...