mywebland mybloggie vulnerabilities and exploits

(subscribe to this query)

index.php in myWebland myBloggie 2.1.4 and previous versions allows remote malicious users to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.

Mywebland Mybloggie 2.1.3 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie Mywebland Mybloggie 2.1.1 Mywebland Mybloggie 2.1.2

SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and previous versions allows remote malicious users to execute arbitrary SQL commands via the username parameter.

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.1

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=del...

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.3 Mywebland Mybloggie 2.1.3 Beta

10 EDB exploits

Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.

Mywebland Mybloggie 2.1.3 Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.2

1 EDB exploit

Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote malicious users to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the date_no parameter in viewdate mode, (3) the cat_id parameter in viewcat mode, the (4) month_no or (5) y...

Mywebland Mybloggie 2.1.1 Mywebland Mybloggie 2.1.3

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in myBloggie 2.1.1 allow remote malicious users to inject arbitrary web script or HTML via the (1) year parameter in viewmode.php, or the (2) cat_id, (3) month_no, or (4) post_id parameter in index.php, which are not properly sa...

Mywebland Mybloggie 2.1.2 Mywebland Mybloggie 2.1.1

1 EDB exploit

delcomment.php in myBloggie 2.1.1 allows remote malicious users to delete arbitrary comments by modifying the comment_id parameter.

Mywebland Mybloggie 2.1.1 Mywebland Mybloggie 2.1.2

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote malicious users to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function.

Mywebland Mybloggie 2.1.3 Beta Mywebland Mybloggie 2.1.3

CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote malicious users to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.

Mywebland Mybloggie 2.1.3 Mywebland Mybloggie 2.1.3 Beta

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) cat_id or (2) year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225.

Mywebland Mybloggie

1 EDB exploit

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook