EUVD-2007-2299

Malware in sbrugna...

qdblog 0.4 (SQL Injection/lfi) Multiple Vulnerabilities

No description provided by source. . . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source,...

Quick and Dirty Blog (qdblog) 0.4 - 'categories.php' Local File Inclusion

Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2 POC: /categories.php?theme=../../../../../../../../../etc/passwd%00 milw0rm.com 2007-11-03...

Quick and Dirty Blog (qdblog) 0.4 - categories.php Local File Inclusion

Quick and Dirty Blog qdblog 0.4 - categories.php Local File Inclusion Quick and Dirty Blog 0.4 categories.php Local File Inclusion Vulnerability http://heanet.dl.sourceforge.net/sourceforge/qdblog/qdblog-0.4.tar.bz2 POC: /categories.php?theme=../../../../../../../../../etc/passwd%00 milw0rm.com...

Sql injection

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2305

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog QDBlog 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2007-2304

CVE-2007-2304 affects Quick and Dirty Blog (QDBlog) 0.4 (and possibly earlier). The vulnerability is described as multiple directory traversal flaws that allow remote attackers to include and execute arbitrary local files via a .. in the theme parameter to categories.php and other unspecified fil...

CVE-2007-2305

The CVE-2007-2305 entry concerns multiple SQL injection flaws in the Quick and Dirty Blog (QDBlog) 0.4 (and possibly earlier) within the authenticated path. Specifically, the vulnerability resides in authenticate.php, where the (1) username and (2) password parameters can be manipulated to execut...

QDBlog v0.4 - MULTIPLE VULNERABILITIES

. . . . | . .| . .;/ || .| .net | .| "QDBlog v0.4 - MULTIPLE VULNERABILITIES" by Omni 1 Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description ...

qdblog-lfisql.txt

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source, simple, minimalistic blogging...

QDBlog 0.4 (SQL Injection/LFI) Multiple Remote Vulnerabilities

No description provided by source. . . . . | . .| . .;/ |\| Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source,...

QDBlog 0.4 (SQL Injection/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== QDBlog 0.4 SQL Injection/LFI Multiple Remote Vulnerabilities ============================================================== . . . . | . .| . .;/ || Infos --------- Date :...

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection / Local File Inclusion

. . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed! Description : QDBlog is an open-source, simple, minimalistic blogging...

Quick and Dirty Blog (qdblog) 0.4 - SQL Injection Local File Inclusion

Quick and Dirty Blog qdblog 0.4 - SQL Injection Local File Inclusion . . . . | . .| . .;/ || Infos --------- Date : 2007-04-12 Product : QDBlog Version : v0.4 - Prior version maybe also be affected Vendor : http://sourceforge.net/projects/qdblog/ Vendor Status : 2007-04-12 - Not Informed!...