160 matches found
RCE-Simplephpblog-biggiedroid
CVE-2025-15495 - 任意文件上传导致远程代码执行RCE 产品 BiggiDroid – 简单PHP博客CMS 产品页面：https://biggidroid.com/product/simple-php-blog/ 漏洞类型 任意文件上传 无限制文件上传 远程代码执行RCE 严重性 严重 CVSS（估算）： 9.8 AV:N / AC:L / PR:L / UI:N / S:U / C:H / I:H / A:H 摘要 简单PHP博客CMS 在管理面板的站点Logo上传功能 中存在无限制文件上传漏洞 。 经过身份验证的攻击者可以上传一个伪装成图片的恶意PHP文件...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223
The CVE-2025-15223 issue affects Philipinho Simple-PHP-Blog, specifically in the file /login.php where manipulation of the Username parameter enables cross-site scripting. The vulnerability is exploitable remotely, with public exploits, and is associated with versions prior to the commit 94b5d3e5...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-15223 Philipinho Simple-PHP-Blog login.php cross site scripting
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
Simple-PHP-Blog 代码注入漏洞
Simple-PHP-Blog is a simple blogging system by the individual developer Philip Okugbe. A code injection vulnerability exists in Simple-PHP-Blog, which stems from an incorrect manipulation of the parameter Username in the file /login.php, which could lead to a cross-site scripting attack...
CVE-2025-15223: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The...
CVE-2025-14227
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227 Philipinho Simple-PHP-Blog edit.php sql injection
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227 Philipinho Simple-PHP-Blog edit.php sql injection
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
CVE-2025-14227
CVE-2025-14227 affects Philipinho Simple-PHP-Blog (up to commit 94b5d3e57308bce5dfbc44c3edafa9811893d958). The vulnerability is an SQL injection in the /edit.php handler caused by improper input processing. It is remotely exploitable over the network with no privileges and no user interaction req...
CVE-2025-14227: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to...
EUVD-2007-5053
Malware in sbrugna...
EUVD-2005-3472
Malware in sbrugna...
EUVD-2005-0215
Malware in sbrugna...
EUVD-2007-5052
Malware in sbrugna...
EUVD-2005-2788
Malware in sbrugna...