Lucene search
+L

65 matches found

EUVD
EUVD
added 2026/08/06 12:31 a.m.13 views

EUVD-2026-53683

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...

5.3CVSS3.6AI score0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/06 12:16 a.m.16 views

CVE-2026-18968

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...

5.3CVSS0.00263EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/08/05 11:00 p.m.11 views

CVE-2026-18968

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...

5.3CVSS3.6AI score0.00263EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/05 11:00 p.m.38 views

CVE-2026-18968 ttttonyhe OBlog tags.php cross site scripting

A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processing of the file /tags.php. Such manipulation of the argument day leads to cross site scripting. The attack may be performed from remote. The exploit...

5.3CVSS0.00263EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/05 11:00 p.m.62 views

CVE-2026-18968

CVE-2026-18968 affects ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f. The vulnerability is in processing of the file /tags.php where manipulation of the day argument enables cross site scripting. The attack could be performed remotely, and the exploit has been publicly disclosed....

5.3CVSS3.6AI score0.00263EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2009-4870

Malware in sbrugna...

6.8CVSS6.4AI score0.00975EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-4871

Malware in sbrugna...

4.3CVSS6.4AI score0.01488EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2009-4866

Malware in sbrugna...

4.3CVSS6.4AI score0.01022EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2009-0288

Malware in sbrugna...

4.3CVSS6.4AI score0.01449EPSS
SaveExploits2References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2009-4872

Malware in sbrugna...

6.8CVSS6.4AI score0.01724EPSS
SaveExploits1References3
seebug.org
seebug.org
added 2014/07/01 12:00 a.m.24 views

OBLOG 'err.asp' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/33416/info OBLOG is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

7.1AI score
SaveExploits0
myhack58
myhack58
added 2012/07/02 12:00 a.m.19 views

Oblog 4.5-4.6 access&mssql getshell 0day-vulnerability warning-the black bar safety net

Impact range: 4.5 - 4.6 Vulnerability requirements: IIS6. 0\Open Membership Mining author:henry Absolute originality, technical content is not high,but the impact of the relatively wide range of.. Vulnerability file: AjaxServer. asp 3 of 7 2 rows logfilename = TrimRequest"filename"//not filter...

0.2AI score
SaveExploits0
NVD
NVD
added 2010/06/25 7:30 p.m.29 views

CVE-2009-4907

Multiple cross-site request forgery CSRF vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 force an admin logout, 3 change the visibility of posts, 4 remove links, and 5 change the name fields of a blog...

6.8CVSS7.2AI score0.00975EPSS
SaveExploits2References4
NVD
NVD
added 2010/06/25 7:30 p.m.22 views

CVE-2009-4903

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.01022EPSS
SaveExploits0References3
NVD
NVD
added 2010/06/25 7:30 p.m.15 views

CVE-2009-4904

article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service blog spam via a comment=new action...

5CVSS6.6AI score0.01193EPSS
SaveExploits1References2
NVD
NVD
added 2010/06/25 7:30 p.m.19 views

CVE-2009-4908

Multiple cross-site scripting XSS vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the 1 commentName, 2 commentEmail, 3 commentWeb, or 4 commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or...

4.3CVSS5.5AI score0.01488EPSS
SaveExploits2References4
NVD
NVD
added 2010/06/25 7:30 p.m.19 views

CVE-2009-4909

admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests...

6.8CVSS6.8AI score0.01724EPSS
SaveExploits1References2
Prion
Prion
added 2010/06/25 7:30 p.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS6AI score0.01022EPSS
SaveExploits0References3
Prion
Prion
added 2010/06/25 7:30 p.m.17 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the 1 commentName, 2 commentEmail, 3 commentWeb, or 4 commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or...

4.3CVSS5.8AI score0.01488EPSS
SaveExploits2References4
Prion
Prion
added 2010/06/25 7:30 p.m.19 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that 1 change the admin password, 2 force an admin logout, 3 change the visibility of posts, 4 remove links, and 5 change the name fields of a blog...

6.8CVSS7.8AI score0.00975EPSS
SaveExploits2References4
Rows per page
Query Builder