CVE-2006-5195

Multiple cross-site scripting XSS vulnerabilities in Wheatblog 1.0 and 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2007-3557

SQL injection vulnerability in admin/login.php in Wheatblog wB 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter...

CVE-2006-7002

Cross-site scripting XSS vulnerability in addcomment.php in Wheatblog wB 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may...

CVE-2006-5195

CVE-2006-5195 (Wheatblog 1.0/1.1) and related CVEs describe multiple XSS vulnerabilities in Wheatblog’s add_comment.php and related input fields, allowing remote injection of arbitrary script/HTML via unspecified vectors (CVE-2006-5195; CVE-2006-7002; CVE-2006-5921). Details indicate XSS through ...

Wheatblog 1.1 - session.php Remote File Inclusion

Wheatblog 1.1 - session.php Remote File Inclusion Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & l2odon & DrtRp & Sh3ll db != 'resource' touchDatabaseSession; Proof of Concept: server/includes/session.php?wbclassdir=SHELL Contact : [email protected] milw0rm.com...