Simplog v0.9.3.2 Mutliple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Simplog v0.9.3.2 Mutliple Vulnerabilities ========================================= Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog...

Simplog 0.9.3.2 - Multiple Vulnerabilities

Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download Author Amol Naik amolnaik4atgmail.com Date...

Simplog 0.9.3.2 - Multiple Vulnerabilities

Simplog 0.9.3.2 - Multiple Vulnerabilities Mutliple Vulnerabilities in Simplog v0.9.3.2 Name Multiple vulnerabilities in Simplog Systems Affected Simplog 0.9.3.2 and possibly earlier versions Download http://sourceforge.net/projects/simplog/files/simplog/0.9.3.2/simplog-0.9.3.2.tar.gz/download...

Unfixed XSS vulnerability at www.meganjackson.org

Security researcher SaMTHG, has submitted on 07/07/2009 a cross-site-scripting XSS vulnerability affecting www.meganjackson.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currentl...

Simplog Archive.PHP SQL注入漏洞

Simplog是一款基于PHP的WEB应用程序。 Simplog不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'CopyCactiUser.PHP'脚本对用户提交的'pid'参数缺少过滤，提交恶意脚本代码作为参数数据，可导致获得敏感信息。 Simplog Simplog 0.9.3 .2 目前没有解决方案提供： http://www.simplog.org/...

Simplog 0.9.3 - 'archive.php' SQL Injection

source: https://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Simplog 0.9.3 - archive.php SQL Injection

Simplog 0.9.3 - archive.php SQL Injection source: https://www.securityfocus.com/bid/21843/info Simplog is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...

simplog0932.txt

Afected Software: simplog up to 0.9.3.2 latest version - 12/05/2006 Site: http://www.simplog.org Simplog provides an easy way for users to add blogging capabilities to their existing websites. Simplog is written in PHP and compatible with multiple databases. Simplog also features an RSS/Atom...

SIMPLOG 0.9.3 injection sql & multiple xss

SIMPLOG 0.9.3 cms website : http://www.simplog.org/ xss: Administration Panel - user.php Name URL Email API Key Flickr Email Flickr Password - news.php URL - edit.php Title Entry Manual TrackBack = risk very low SimpLog User Part...

Simplog 0.9.3 - 'archive.php?PID' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context ...

Simplog 0.9.3 - 'BlogID' Multiple SQL Injections

source: https://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acces...

Simplog 0.9.3 - archive.php?PID Cross-Site Scripting

Simplog 0.9.3 - archive.php?PID Cross-Site Scripting source: https://www.securityfocus.com/bid/20900/info Simplog is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute i...

Simplog 0.9.3 - BlogID Multiple SQL Injections

Simplog 0.9.3 - BlogID Multiple SQL Injections source: https://www.securityfocus.com/bid/20899/info Simplog is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow a...

SQL Injection simplog

Softare: Simplog www.simplog.org version:0.9.3.1 i assume others as well There are a few sql injections available with this software. This one is in preview.php eg. http://site/preview.php?blogid=2&adm=tem&tid=-120union20select20passw ord20from20blogusers20where20name='insert username here'...

Simplog0.9.3.1.txt

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Simplog 0.9.3.1 http://www.simplog.org/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - requires at least one blog entry POC:...

Simplog 0.9.3.1 SQL Injection

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Simplog 0.9.3.1 http://www.simplog.org/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - requires at least one blog entry POC: host/path/comments.php?op=edit&cid=120union20select209,9,9,login,...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2006-5398

The CVE-2006-5398 entry concerns Simplog 0.9.3.1, where a SQL injection vulnerability exists in comments.php. The flaw allows remote attackers to execute arbitrary SQL commands by supplying a crafted cid parameter. The vulnerability is documented across multiple sources (NVD/NIST) with the same d...

CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2006-5398: Undefined Security Weakness

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...