427 matches found
Weblog Oggi v1.0
Weblog Oggi v1.0 Homepage: http://www.hotwebscripts.com/index.php User input isn't sanatized before being dynamically generated. For proof of concept just put IMG SRC="javascript:alert'XSS';" in as a comment...
Blog Mod <= 0.2.x SQL Injection
==================== Discovered by: Qex Date: 28 April 2006 ==================== /weblogposting.php?mode=quote&r=SQL&w=1...
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2categories.php?b2inc' Remote File Inclusion
source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...
CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion
CafeLog B2 0.6.1 Weblog and News Publishing Tool - b2mail.php?b2inc Remote File Inclusion source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may all...
CafeLog B2 0.6.1 Weblog and News Publishing Tool - 'b2mail.php?b2inc' Remote File Inclusion
source: https://www.securityfocus.com/bid/23659/info B2 is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are...
GreyMatter WebLog 1.21d - Remote Command Execution (1)
include include include define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve host define RETOK 1 // Return OK pragma commentlib,"wsock32" define portnum 80 int infochar ls1; int ConnectWithStringchar...
[eVuln] Maian Weblog Multiple SQL Injection Vulnerabilities
New eVuln Advisory: Maian Weblog Multiple SQL Injection Vulnerabilities http://evuln.com/vulns/101/summary.html --------------------Summary---------------- eVuln ID: EV0101 CVE: CVE-2006-1334 Software: Maian Weblog Sowtware's Web Site: http://www.maianscriptworld.co.uk/ Versions: 2.0 Critical...
GreyMatter WebLog 1.21d - Remote Command Execution (1)
GreyMatter WebLog 1.21d - Remote Command Execution 1 include include include define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve host define RETOK 1 // Return OK pragma commentlib,"wsock32" define portnum 80 i...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (1)
Exploit for unknown platform in category web applications =============================================================== GreyMatter WebLog include include define RETCONNERR 4 // Connection error define RETSOCKERR 3 // Return for socket error define RETRESVERR 2 // Error code for cannot resolve...
GreyMatter WebLog <= 1.21d Remote Command Execution Exploit (2)
Exploit for unknown platform in category web applications =============================================================== GreyMatter WebLog | \ | / \ / / / / / / Iran Hackerz Security Team DeltaHAcking Team Name : Greymatter Site : http://www.noahgrey.com/greysoft/ example: target :...
Maian Weblog 2.0 - 'print.php' SQL Injection
source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject arbitrary SQL logic into the vulnerable...
Maian Weblog 2.0 - mail.php SQL Injection
Maian Weblog 2.0 - mail.php SQL Injection source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject...
Maian Weblog 2.0 - print.php SQL Injection
Maian Weblog 2.0 - print.php SQL Injection source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject...
Sql injection
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 entry and 2 email parameters to a print.php and b mail.php...
CVE-2006-1334
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 entry and 2 email parameters to a print.php and b mail.php...
CVE-2006-1334
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 entry and 2 email parameters to a print.php and b mail.php...
CVE-2006-1334
CVE-2006-1334 : Maian Weblog 2.0 has SQL injection in print.php and mail.php; vulnerable parameters are (1) entry and (2) email. Remote attackers could potentially execute arbitrary SQL. No patch/mitigation details are provided in the supplied documents; exploitation specifics are not described i...
Design/Logic Flaw
Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors...