CVE-2007-0798

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

CVE-2007-0798

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

CVE-2007-0799

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-0798

CVE-2007-0798 affects Ublog Reload 1.0.5. The issue comprises multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp (remote, unauthenticated) and (2–4) badword.asp, polls.asp, and users.asp (remo...

CVE-2007-0799

CVE-2007-0799 involves a SQL injection in badword.asp of Ublog Reload 1.0.5. The vulnerability arises from improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected product/version: Ublog Reload 1.0.5; vulnerable compon...

CVE-2007-0798: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login.asp; and allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters to 2 badword.asp,...

CVE-2007-0799: Undefined Security Weakness

SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Ublog Reload Admin Panel Multiple HTML Injections

Ublog Reload Admin Panel Multiple HTML Injections Ublog Reload has been developed to run exclusively on web sites hosted on Windows Servers with Internet Information Server 4.0 or higher and ASP 3.0 installed. No other Platforms are supported. Ublog Reload supports Microsoft Access, Microsoft Sql...

UBlog Remote XSS Exploit

Vunerabilitys: ---------------- XSS Exploit Product: -------- UBlog 1.6 Access Edition Vendor: -------- http://www.uapplication.com/ublog/index.asp Description of product: ----------------------- Blog archive by date; Possibility to comment a blog; Notify via email; Password protected; Amend or...

Cross site scripting

Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...

CVE-2006-2246

Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...

CVE-2006-2246

The CVE-2006-2246 entry documents a cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition. The flaw allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry. Affected product: UBlog 1.6 Access Edition. Root cause: unsanitized input in ...

CVE-2006-2246

Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...

CVE-2006-2246: Undefined Security Weakness

Cross-site scripting XSS vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry...

UBlog Remote XSS Exploit

------------------------------------------------------------------ - UBlog Remote XSS Exploit - -= http://colander.altervista.org/advisory/UBlog.txt =- ------------------------------------------------------------------ -= UBlog 1.6 =- Omnipresent May 04, 2006 Vunerabilitys: ---------------- XSS...

Echo Security Advisory 2005.18

--------------------------------------------------------------------------- ECHOADV18$2005 Multiple SQL INJECTION in Ublog Reload 1.0.5 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 20th 2005 Location: Indonesia, Jakarta Web:...

CVE-2005-2009

CVE-2005-2009 affects Ublog Reload 1.0.5 with multiple SQL injection vulnerabilities. Remote attackers can potentially execute arbitrary SQL commands through (1) ci, (2) d, or (3) m parameters to index.asp, or the (4) bi parameter to blog_comment.asp. The connected documents confirm the vendor/pr...

CVE-2005-2009

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...

CVE-2005-2010

Cross-site scripting XSS vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter...

CVE-2005-2009

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...