Simplog Archive.PHP SQL注入漏洞

Simplog是一款基于PHP的WEB应用程序。 Simplog不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'CopyCactiUser.PHP'脚本对用户提交的'pid'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Simplog Simplog 0.9.3 .2 目前没有解决方案提供： http://www.simplog.org/...

Simplog 0.9.3 - 'archive.php' SQL Injection

source: https://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Simplog 0.9.3 - archive.php SQL Injection

Simplog 0.9.3 - archive.php SQL Injection source: https://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

simplog0932.txt

Afected Software: simplog up to 0.9.3.2 latest version - 12/05/2006 Site: http://www.simplog.org Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is written in PHP and compatible with multiple databases. Simplog also features an RSS/Atom...

SIMPLOG 0.9.3 injection sql & multiple xss

SIMPLOG 0.9.3 cms website : http://www.simplog.org/ xss: Administration Panel - user.php Name URL Email API Key Flickr Email Flickr Password - news.php URL - edit.php Title Entry Manual TrackBack = risk very low SimpLog User Part...

Simplog 0.9.3 - 'archive.php?PID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context ...

Simplog 0.9.3 - 'BlogID' Multiple SQL Injections

source: https://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...

Simplog 0.9.3 - archive.php?PID Cross-Site Scripting

Simplog 0.9.3 - archive.php?PID Cross-Site Scripting source: https://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute i...

Simplog 0.9.3 - BlogID Multiple SQL Injections

Simplog 0.9.3 - BlogID Multiple SQL Injections source: https://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...

SQL Injection simplog

Softare: Simplog www.simplog.org version:0.9.3.1 i assume others as well There are a few sql injections available with this software. This one is in preview.php eg. http://site/preview.php?blogid=2&adm=tem&tid=-120union20select20passw ord20from20blogusers20where20name='insert username here'...

Simplog0.9.3.1.txt

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Simplog 0.9.3.1 http://www.simplog.org/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - requires at least one blog entry POC:...

Simplog 0.9.3.1 SQL Injection

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Simplog 0.9.3.1 http://www.simplog.org/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - requires at least one blog entry POC: host/path/comments.php?op=edit&cid=120union20select209,9,9,login,...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2006-5398

The CVE-2006-5398 entry concerns Simplog 0.9.3.1, where a SQL injection vulnerability exists in comments.php. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted cid parameter. The vulnerability is documented across multiple sources (NVD/NIST) with the same d...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection Vulnerability Note: Requires at least one blog entry to be made prior to injection Usage: php script.php host path user id Usage Example: php script.php domain.com /simplog/ 1 Googledork: intext:Powered b...

Simplog 0.9.3.1 - 'comments.php' SQL Injection

!/usr/bin/php input type=text name=cname maxlength=64 value="",$data; $bname = expl...

Simplog <= 0.9.3.1 comments.php Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Simplog = 0.9.3.1 comments.php Remote SQL Injection Exploit ============================================================ !/usr/bin/php ?php / Simplog 0.9.3.1 Remote SQL Injection...

Simplog 0.9.3.1 - comments.php SQL Injection

Simplog 0.9.3.1 - comments.php SQL Injection !/usr/bin/php input type=text name=c...

CVE-2006-4058

Cross-site scripting XSS vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search. NOTE: some details are obtained from third party information...