CVE-2006-1762

CVE-2006-1762 affects blur6ex 0.3.452, with a directory traversal flaw in index.php via the shard parameter that allows remote file includes and can lead to reflected XSS and path disclosure as noted in the NVD description. The connected records confirm the same vulnerability details; no explicit...

CVE-2006-1763

Summary (CVE-2006-1763) : Multiple SQL injection vulnerabilities in blur6ex v0.3.452 allow remote attackers to execute arbitrary SQL commands via the ID parameter in blog and content shards. Specifically, the issues affect engine/shards/blog.php (actions g_reply, g_permaPost) and engine/shards/co...

CVE-2006-3065

CVE-2006-3065 is a SQL injection vulnerability in blur6ex 0.3.462 affecting engine/shards/blog.php. The flaw allows remote attackers to inject arbitrary SQL via the ID parameter in a proc_reply action on the blog shard. The description notes similarity to CVE-2006-1763 but cites different affecte...

CVE-2006-1761

CVE-2006-1761 describes a cross-site scripting vulnerability in blur6ex 0.3.452, where the error message in index.php is not sanitised, allowing remote attackers to inject arbitrary web script or HTML via the errormsg parameter. The issue is explicitly tied to the errormsg field (the shard parame...

CVE-2006-4106

The CVE-2006-4106 entry documents a Cross-site Scripting (XSS) vulnerability in blursoft blur6ex 0.3, exploitable by remote attackers to inject arbitrary web script or HTML via a comment title. The affected component is the blur6ex 0.3 product; the root cause is improper sanitization of the comme...