Lucene search

K

Blogphp Security Vulnerabilities

cve
cve

CVE-2008-6745

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2...

7AI Score

0.017EPSS

2009-04-23 05:30 PM
24
cve
cve

CVE-2008-6631

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than...

5.7AI Score

0.007EPSS

2009-04-07 02:17 PM
22
cve
cve

CVE-2008-2524

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a...

6.8AI Score

0.003EPSS

2008-06-03 03:32 PM
25
cve
cve

CVE-2008-0678

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page...

8.3AI Score

0.001EPSS

2008-02-12 01:00 AM
22
cve
cve

CVE-2008-0679

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search...

5.6AI Score

0.002EPSS

2008-02-12 01:00 AM
26