19 matches found
EUVD-2006-0352
Malware in sbrugna...
EUVD-2005-4053
Malware in sbrugna...
EUVD-2006-0353
Malware in sbrugna...
SaralBlog 1.0 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16306/info saralblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
SaralBlog-sql.txt
New eVuln Advisory: SaralBlog XSS & Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/40/summary/bt/ --------------------Summary---------------- Software: SaralBlog Sowtware's Web Site: http://www.saralblog.org/ Versions: 1.0 Critical Level: Moderate Type: Multiple Vulnerabilities...
[eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities
New eVuln Advisory: SaralBlog XSS & Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/40/summary/bt/ --------------------Summary---------------- Software: SaralBlog Sowtware's Web Site: http://www.saralblog.org/ Versions: 1.0 Critical Level: Moderate Type: Multiple Vulnerabilities...
CVE-2006-0346
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
Cross site scripting
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
Sql injection
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...
CVE-2006-0345
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...
CVE-2006-0345
The CVE-2006-0345 entry describes multiple SQL injection vulnerabilities in SaralBlog 1.0. The issues allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. The reference also notes that the id/viewprofile.php issue is covered by CVE-2005-4058. The connec...
CVE-2006-0345
Multiple SQL injection vulnerabilities in SaralBlog 1.0 allow remote attackers to execute arbitrary SQL commands via the search parameter to search.php. NOTE: the id/viewprofile.php issue is already covered by CVE-2005-4058...
CVE-2006-0346
Cross-site scripting XSS vulnerability in SaralBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via a website field in a new comment to view.php, which is not properly handled in the comment function in functions.php...
CVE-2006-0346
CVE-2006-0346 is an XSS vulnerability in SaralBlog 1.0. The issue arises when an attacker-supplied value is not properly handled in the website field of a new comment to view.php, due to insufficient sanitization in functions.php. The NVD entry lists a base score of 4.3 (Medium) with low confiden...
SaralBlog 1.0 - Multiple Input Validation Vulnerabilities
SaralBlog 1.0 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/16306/info saralblog is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...
CVE-2005-4058
SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php...
CVE-2005-4058
SQL injection vulnerability in saralblog 1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php...
CVE-2005-4058
CVE-2005-4058 : A SQL injection vulnerability exists in SaralBlog 1.x and earlier that allows remote attackers to execute arbitrary SQL commands via the id parameter to viewprofile.php. The CVE entry notes a base score of 7.5 (HIGH) with network attack vector, low complexity, and no authenticatio...
saralblog v1 SQL inj. vuln.
saralblog v1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/saralblog-v1-sql-inj-vuln.html vendor:http://www.saralblog.org/ affected version:v.1 and prior Product Description: saralblog is a very simple to use blog, which has some ve...