7 matches found
CVE-2005-4547
The vulnerability is a Cross-site Scripting (XSS) issue in eggblog 2.0, specifically in home/search.php, where the q parameter used by Keyword and Search fields can allow remote attackers to execute arbitrary SQL commands. The description notes XSS as the vulnerability type but the impact is stat...
CVE-2006-6046
Eggblog 3.1.0 is affected by multiple XSS vulnerabilities exploitable via the edit parameter in admin/articles.php and admin/comments.php, and via the add parameter in admin/users.php. The root cause is improper sanitization of user-supplied input, enabling remote script execution in the victim’s...
CVE-2006-2727
The CVE-2006-2727 entry describes a vulnerability in Eggblog prior to version 3.0 where the home/register.php flow allows remote attackers to change the password of administrators (and possibly other users) by supplying a modified username parameter. Affected component: Eggblog web application, l...
CVE-2006-0350
The CVE-2006-0350 entry concerns an XSS vulnerability in eggblog 2.0. The flaw allows remote attackers to inject arbitrary Web script or HTML via the message field to topic.php. NVD records a base score of 4.3 (MEDIUM) with network attack vector, no confidentiality or availability impact, and par...
CVE-2005-4546
CVE-2005-4546 affects eggblog 2.0: the search.php module exposes the server full path to remote attackers via an invalid q parameter, with the description suggesting a possible SQL injection trigger. The concrete impact stated is path disclosure; no additional exploit details are provided in the ...
CVE-2006-0349
CVE-2006-0349 describes an SQL injection in eggblog 2.0, where the attacker can cause arbitrary SQL execution through the id parameter in blog.php. The vulnerability arises from unsafe handling of user input in a database query, enabling potential data disclosure, modification, or other SQL-based...