CVE-2006-0324

WebspotBlogging 3.0 is affected by a SQL injection in the login.php username parameter that allows remote attackers to bypass authentication and execute arbitrary SQL commands due to insufficient input filtering. Impact is authentication bypass and potential database access. The issue is tied to ...

CVE-2006-2860

CVE-2006-2860 is a PHP remote file inclusion vulnerability in Webspotblogging 3.0.1. An attacker can trigger arbitrary PHP code execution by supplying a URL in the path parameter to one of four files: inc/logincheck.inc.php, inc/adminheader.inc.php, inc/global.php, or inc/mainheader.inc.php. The ...