38 matches found
EUVD-2009-3603
Malware in sbrugna...
EUVD-2006-4035
Malware in sbrugna...
EUVD-2006-6523
Malware in sbrugna...
EUVD-2005-1689
Malware in sbrugna...
CVE-2023-46059
Cross Site Scripting XSS vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL to Ping parameters of the admin/trackback.php component...
CVE-2023-46059
CVE-2023-46059: A Cross-Site Scripting (XSS) flaw in Geeklog-Core Geeklog v2.2.2 affects the admin/trackback.php component, specifically via the Ping parameter, enabling a remote attacker to execute arbitrary code through a crafted payload. The vulnerability is described across multiple sources a...
CVE-2023-46059: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Geeklog-Core geeklog v.2.2.2 allows a remote attacker to execute arbitrary code via a crafted payload to the Service, and website URL to Ping parameters of the admin/trackback.php component...
WordPress core <= 6.0.2 - Cross-Site Request Forgery (CSRF) vulnerability in wp-trackback.php
Cross-Site Request Forgery CSRF vulnerability in wp-trackback.php discovered by Simon Scannell in WordPress core versions = 6.0.2. Solution Update the WordPress to the latest available version at least 6.0.3...
Loggix Project <= 9.4.5 - Multiple Remote File Include Vulnerability
No description provided by source. In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog :...
DotClear 1.2.x /ecrire/trackback.php post_id Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browse...
myBloggie <= 2.1.4 (trackback.php) Multiple SQL Injections Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo MyBloggie = 2.1.4 trackback.php multiple SQL injections vulnerability /\n; echo administrative credentials disclosure exploit\n; echo by rgod [email protected]\n; echo site: http://retrogod.altervista.org\n\n; / works...
MyBloggie 2.1.6 - HTML Injection / SQL Injection
source: https://www.securityfocus.com/bid/48317/info myBloggie is prone to a SQL-injection vulnerabilities and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...
CVE-2009-4789: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 wp-comments-post.php and 2 wp-trackback.php...
CVE-2009-3622
CVE-2009-3622 affects WordPress wp-trackback.php. The vulnerability allows remote attackers to cause a denial of service (CPU consumption and server hang) by sending a long title together with a charset parameter consisting of many comma-separated "UTF-8" substrings, exploiting mb_convert_encodin...
CVE-2009-3622: Undefined Security Weakness
Algorithmic complexity vulnerability in wp-trackback.php in WordPress before 2.8.5 allows remote attackers to cause a denial of service CPU consumption and server hang via a long title parameter in conjunction with a charset parameter composed of many comma-separated "UTF-8" substrings, related t...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...
Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog :...
Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ====================================================================== Loggix Project = 9.4.5 Multiple Remote File Inclusion Vulnerabilities ====================================================================== In The Name Of Allah Loggix...
Loggix Project 9.4.5 - Multiple Remote File Inclusions
In The Name Of Allah Loggix Project = 9.4.5 Multiple Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/loggix/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA Blog : http://sh3ll4u.blogspot.com Dork : No DoRk f0R ScRipT...
CVE-2008-7090
CVE-2008-7090 affects Pligg 9.9 and earlier. Two directory traversal flaws allow remote attackers to (1) check existence of arbitrary files via .. in trackback.php ($tb_url) and (2) include arbitrary files via .. in the template parameter to settemplate.php. Impact per sources: potential file dis...