EUVD-2006-5009

Malware in sbrugna...

EUVD-2010-4821

Malware in sbrugna...

EUVD-2010-4820

Malware in sbrugna...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

xweblog <= 2.1 (kategori.asp) Remote SQL Injection Vulnerability

No description provided by source. xweblog = 2.1 tr kategori.aspRemote SQL Injection Vulnerability Author : Muhacir Source : http://www.aspindir.com/goster/4386 Exploit : http://www.victim.com/xweblog path/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyele...

xWeblog 2.2 - (arsiv.asp tarih) SQL Injection Exploit

No description provided by source. !/usr/bin/env python -- coding:utf-8 -- ''' Title : xWeblog v2.2 arsiv.asp tarih SQL Injection Exploit .py Proof : http://img408.imageshack.us/img408/7624/sqlm.jpg Script Down. : http://www.aspdunyasi.com/goster.asp?id=19 Tested : Windows XP Professional sp3...

xWeblog 2.2 - (oku.asp?makale_id) SQL Injection Vulnerability

No description provided by source. =================================================== xWeblog v2.2 - Remote SQL Injection Vulnerability tr =================================================== My + Author : KnocKout Contact : [email protected] Software info Web App. : xWeblog v2.2 Software:...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4855

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

Sql injection

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

Sql injection

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4855

The CVE-2010-4855 entry describes a SQL injection in Oku.asp of xWeblog 2.2, exploitable via the makale_id parameter. The underlying issue is an injectable input vector that allows remote attackers to execute arbitrary SQL commands. Affected software is xWeblog 2.2 (Oku.asp); no specific vendor v...

CVE-2010-4856

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4855

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

CVE-2010-4856

CVE-2010-4856 affects xWeblog 2.2, vulnerable in arsiv.asp via the tarih parameter to allow remote execution of SQL commands. The vulnerability is a SQL injection in the application, enabling partial confidentiality, integrity, and availability impact per the NVD metrics (base score 7.5). Related...

CVE-2010-4856: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter...

CVE-2010-4855: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makaleid parameter...

PT-2011-1791

Name of the Vulnerable Software and Affected Versions xWeblog version 2.2 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the tarih parameter in the arsiv.asp file. Recommendations For xWeblog version 2.2,...

PT-2011-1790

Name of the Vulnerable Software and Affected Versions xWeblog version 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the makale id parameter in the oku.asp file. Recommendations For xWeblog version 2.2, consider restricting access to the...

xweblog.2.2 Database Disclosure Exploit

Exploit for perl platform in category web applications !/usr/bin/perl -w xweblog.2.2 Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/2010 Home: http://www.hack-r1z.com/cc/ Dz-Ghost Team ===== Saoucha Star08 Cyber Sec theblind74 XproratiX onurozkan n2n Meher Assel special thanks t...