5 matches found
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...
CVE-2007-0799
SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2007-0799
CVE-2007-0799 involves a SQL injection in badword.asp of Ublog Reload 1.0.5. The vulnerability arises from improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected product/version: Ublog Reload 1.0.5; vulnerable compon...
CVE-2005-2009
CVE-2005-2009 affects Ublog Reload 1.0.5 with multiple SQL injection vulnerabilities. Remote attackers can potentially execute arbitrary SQL commands through (1) ci, (2) d, or (3) m parameters to index.asp, or the (4) bi parameter to blog_comment.asp. The connected documents confirm the vendor/pr...