CVE-2006-0233

CVE-2006-0233 refers to a cross-site scripting (XSS) vulnerability in the PHP file functions.php of the microBlog 2.0 RC-10 package. The issue allows remote attackers to execute arbitrary web script and HTML by supplying a javascript: URI in a [url] BBCode tag, potentially compromising user sessi...

CVE-2006-0234

CVE-2006-0234 documents a SQL injection vulnerability in the web application component: index.php of the microBlog 2.0 RC-10 release. The underlying issue is an injection flaw that allows remote attackers to append arbitrary SQL commands via the two parameters, (1) month and (2) year. The vulnera...

CVE-2011-3756

Summary: CVE-2011-3756 affects MicroBlog 0.9.5. The vulnerability enables information disclosure by directly requesting a PHP file (e.g., init.php), causing an error message that reveals the installation path. This is a server-side information leakage issue that exposes sensitive path information...