NibbleBlog version 4.0.3 suffers from a shell upload vulnerability.
e9b20bd2cae166ab18bb5d06554fb9e8
Nibbleblog contains a flaw that allows an authenticated remote attacker to execute arbitrary PHP code. This Metasploit module was tested on version 4.0.3.
f17ac710b8fd5e4319fb28e5e7f37780
NibbleBlog version 4.0.3 suffers from a cross site request forgery vulnerability.
8573d46ace341a8384fa9ab24063d6a9
NibbleBlog versions 4.0.1 and below suffer from a cross site scripting vulnerability.
070cc31adccb1dd0f70da4129cfffa84
Nibbleblog version 3.4 suffers from path disclosure and shell upload vulnerabilities.
0bd7702294c06211c82e03491be8693f
Nibbleblog version 3.0 suffers from multiple remote SQL injection vulnerabilities.
4eff2d9d54943044b0787b1d1eaab382
Secunia Security Advisory - Russ McRee has discovered a vulnerability in NibbleBlog, which can be exploited by malicious people to conduct cross-site request forgery attacks.
5ccbd58c5f4dcd71d6b36ddc7ce2a1d9