8pixel.net simple blog vulnerabilities and exploits

(subscribe to this query)

Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and previous versions do not properly perform authentication, which allows remote malicious users to add users and perform certain other unauthorized privileged actions. NOTE: The provenance of this informati...

8pixel.net Simple Blog 2.0 8pixel.net Simple Blog 2.1 8pixel.net Simple Blog 2.2 8pixel.net Simple Blog 2.3 8pixel.net Simple Blog 3.0

SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.

8pixel.net Simple Blog 8pixel.net Simple Blog 2.1 8pixel.net Simple Blog 2.2 8pixel.net Simple Blog 2.0

1 EDB exploit

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and previous versions allows remote malicious users to conduct SQL injection attacks via ">" characters in the id parameter, which are not filtered by the protection mechanism.

8pixel.net Simple Blog 2.0 8pixel.net Simple Blog 2.1 8pixel.net Simple Blog 2.2 8pixel.net Simple Blog 2.3

1 EDB exploit

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote malicious users to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.

8pixel.net Simple Blog

1 EDB exploit

SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter.

8pixel.net Simple Blog

2 EDB exploits

SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300.

8pixel.net Simple Blog 3.0

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1 allow remote malicious users to inject arbitrary web script or HTML via (1) a comment to comments.asp and (2) possibly certain other fields in unspecified scripts.

8pixel.net Simple Blog 2.1

8pixel.net Blog 4 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for App_Data/sb.mdb.

8pixel Simple Blog 4.0

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook