CVE-2006-5441

CVE-2006-5441 : In Comdev Web Blogger 4.1, the adminfoot.php file is vulnerable to PHP remote file inclusion when register_globals is enabled. An attacker can supply a URL in the path[docroot] parameter to execute arbitrary PHP code. This is exercised via a remote inclusion vector and is describe...

CVE-2008-6250

CVE-2008-6250 affects Comdev Web Blogger 4.1.3 and earlier, with a SQL injection flaw exploitable via the arcmonth parameter on a blog page. The underlying issue is an injectable SQL query that could allow remote attackers to execute arbitrary SQL commands. Connected documents confirm the vulnera...

CVE-2007-3084

The CVE-2007-3084 entry describes a PHP remote file inclusion vulnerability in Comdev Web Blogger 4.1. Specifically, sampleblogger.php is vulnerable to arbitrary PHP code execution via a URL supplied in the path[docroot] parameter, representing a different vector from CVE-2006-5441. The available...