CVE-2026-18648

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument displayname results in path traversal. The attack is...

CVE-2026-18648

Blix Email Blue Mail Calendar App 2.2.305 is affected by a path traversal in the component react-native-receive-sharing-intent, specifically FileDirectory.getDataColumn/FileDirectory.getFileFromUri. The vulnerability arises from manipulating the _display_name argument, enabling local access explo...

CVE-2026-18648 Blix Email Blue Mail Calendar App react-native-receive-sharing-intent FileDirectory.getFileFromUri path traversal

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument displayname results in path traversal. The attack is...

EUVD-2026-52442

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component react-native-receive-sharing-intent. The manipulation of the argument displayname results in path traversal. The attack is...

EUVD-2007-4464

Malware in sbrugna...

Blix Gazetki Kupony - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blix Gazetki Kupony published at the 'play' market has multiple vulnerabilities...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481

Cross-site scripting XSS vulnerability in index.php in the 1 Blix 0.9.1 and 2 Blix 0.9.1 Rus themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF...

CVE-2007-4481

CVE-2007-4481 is a documented cross-site scripting (XSS) vulnerability affecting the Blix WordPress themes (version 0.9.1 and Blix 0.9.1 Rus). The issue arises in index.php where PATH_INFO (PHP_SELF) input can be manipulated to inject arbitrary web script or HTML. The vulnerability status is base...

WordPress Blix Theme <= 0.9.1 - XSS

Because of this vulnerability in index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the theme...

Vulnerability in theme Blix 0.9.1 for WordPress

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в темах Blix 0.9.1 и Blix 0.9.1 Rus для WordPress. XSS: http://site/index.php/223E3Cscript3Ealertdocument.cookie3C/script3E Уязвимость связана с недостаточной фильтрацией переменной PHPSELF. Дополнительная информаци...

Cross site scripting

Cross-site scripting XSS vulnerability in a certain index.php installation script related to the 1 Blix 0.9.1, 2 Blixed 1.0, and 3 BlixKrieg Blix Krieg 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to...

CVE-2007-4014

Cross-site scripting XSS vulnerability in a certain index.php installation script related to the 1 Blix 0.9.1, 2 Blixed 1.0, and 3 BlixKrieg Blix Krieg 2.2 themes for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, possibly a related issue to...

CVE-2007-4014

CVE-2007-4014 is an XSS issue in the index.php installation script associated with WordPress themes Blix 0.9.1, Blixed 1.0, and BlixKrieg 2.2, where the s parameter can inject arbitrary script/HTML. Connected records also describe a related CVE-2007-4165/XSS in the Blue Memories theme 1.5 for Wor...