CVE-2011-5110

Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list.php, (2) _blogs_list.php, (3) _category_list.php, (4) _comments_list.php, (5) _policy_list.php, (6) _rate_list.php, (7) categoriesblogs_list.php, (8) chosen_authors_list.php, (9) chosen_blogs_list.php, (10) chosen_comments_list.php, and (11) help_list.php in blogs/.

• CWE-89

• http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0303.htmlExploit
• http://osvdb.org/77250
• http://osvdb.org/77251
• http://osvdb.org/77252
• http://osvdb.org/77253
• http://osvdb.org/77254
• http://osvdb.org/77255
• http://osvdb.org/77256
• http://osvdb.org/77257
• http://osvdb.org/77258
• http://osvdb.org/77259
• http://osvdb.org/77260
• http://secunia.com/advisories/46918Vendor Advisory
• http://sourceforge.net/tracker/?func=detail&aid=3506818&group_id=219284&atid=1045881Exploit
• http://www.exploit-db.com/exploits/18129Exploit
• http://www.securityfocus.com/archive/1/520571/100/0/threaded
• http://www.securityfocus.com/bid/50731Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71401
• http://archives.neohapsis.com/archives/fulldisclosure/2011-11/0303.htmlExploit
• http://osvdb.org/77250
• http://osvdb.org/77251
• http://osvdb.org/77252
• http://osvdb.org/77253
• http://osvdb.org/77254
• http://osvdb.org/77255
• http://osvdb.org/77256
• http://osvdb.org/77257
• http://osvdb.org/77258
• http://osvdb.org/77259
• http://osvdb.org/77260
• http://secunia.com/advisories/46918Vendor Advisory
• http://sourceforge.net/tracker/?func=detail&aid=3506818&group_id=219284&atid=1045881Exploit
• http://www.exploit-db.com/exploits/18129Exploit
• http://www.securityfocus.com/archive/1/520571/100/0/threaded
• http://www.securityfocus.com/bid/50731Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71401

Published

Aug 23, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-5104Cross-site scripting (XSS) vulnerability in wpsc-admin/displ…
• CVE-2011-5105Multiple cross-site scripting (XSS) vulnerabilities in Emplo…
• CVE-2011-5106Cross-site scripting (XSS) vulnerability in edit-post.php in…
• CVE-2011-5107Cross-site scripting (XSS) vulnerability in post_alert.php i…
• CVE-2011-5108Cross-site scripting (XSS) vulnerability in config.php in Ad…
• CVE-2011-5109Multiple SQL injection vulnerabilities in Freelancer calenda…
• CVE-2011-5111Multiple SQL injection vulnerabilities in Kajian Website CMS…
• CVE-2011-5112SQL injection vulnerability in Alameda (com_alameda) compone…
• CVE-2011-5113SQL injection vulnerability in frontend/models/techfoliodeta…
• CVE-2011-5114Multiple cross-site scripting (XSS) vulnerabilities in the A…
• CVE-2011-5115Cross-site scripting (XSS) vulnerability in DLGuard, possibl…
• CVE-2011-5116SQL injection vulnerability in setseed-hub in SetSeed CMS 5.…