RSS   Podatności dla 'Loudblog'   RSS

2006-07-25
 
CVE-2006-3832

CWE-Other
 
 
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

 
 
CVE-2006-3820

 
 
Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter.

 
2006-03-09
 
CVE-2006-1114

CWE-Other
 
 
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b) inc/backend_settings.php.

 
 
CVE-2006-1113

CWE-Other
 
 
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter.

 
2006-02-06
 
CVE-2006-0565

CWE-94
 
 
PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter.

 

Copyright 2024, cxsecurity.com

 

Back to Top