mywebland mybloggie 2.1.3 beta vulnerabilities and exploits

(subscribe to this query)

index.php in myWebland myBloggie 2.1.4 and previous versions allows remote malicious users to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.1 Mywebland Mybloggie Mywebland Mybloggie 2.1.3

Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.3

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=del...

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.3

10 EDB exploits

CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote malicious users to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.

Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.3

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote malicious users to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function.

Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.3

SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and previous versions allows remote malicious users to execute arbitrary SQL commands via the username parameter.

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.1

Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote malicious users to execute arbitrary SQL commands via (1) the category parameter in add.php, (2) the cat_desc parameter in addcat.php, (3) the level and user parameters in addu...

Mywebland Mybloggie 2.1.3 Beta

login.php in myBloggie 2.1.3 beta and previous versions allows remote malicious users to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the S...

Mywebland Mybloggie 2.1.3 Beta

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook