index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2...
7AI Score
0.017EPSS
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parameter when registering a new user, different vectors than...
5.7AI Score
0.007EPSS
BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a...
6.8AI Score
0.003EPSS
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page...
8.3AI Score
0.001EPSS
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search...
5.6AI Score
0.002EPSS