CVE-2007-3557: Undefined Security Weakness

SQL injection vulnerability in admin/login.php in Wheatblog wB 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter...

CVE-2006-7002: Undefined Security Weakness

Cross-site scripting XSS vulnerability in addcomment.php in Wheatblog wB 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may...

CVE-2006-5922: Undefined Security Weakness

index.php in Wheatblog wB allows remote attackers to obtain sensitive information via certain values of the postPtr and next parameters, which reveals the path in an error message...