EUVD-2006-1751

Malware in sbrugna...

EUVD-2006-1752

Malware in sbrugna...

CVE-2006-1751

Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2006-1752

Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...

Sql injection

Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...

CVE-2006-1751

CVE-2006-1751 corresponds to multiple SQL injection vulnerabilities in MvBlog prior to 1.6, allowing remote attackers to execute arbitrary SQL commands via unknown vectors. The vulnerability is documented across NVD and CVE lists with a base CVSSv2 score of 7.5 (HIGH; network vector; low attack c...

CVE-2006-1752

The CVE-2006-1752 entry describes multiple XSS vulnerabilities in the MvBlog backend prior to version 1.6. The issue allows remote attackers to inject arbitrary web script or HTML through the comment fields (name or body). The sources do not provide concrete exploit vectors, in-the-wild exploitat...

CVE-2006-1752

Multiple cross-site scripting XSS vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the 1 name or 2 body fields in a comment...

CVE-2006-1751

Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors...