CVE-2009-4904

The CVE-2009-4904 issue affects the oBlog platform where article.php does not properly restrict comments, enabling remote attackers to trigger a denial of service (blog spam) through a comment=new action. The description does not specify affected versions or exact code root cause beyond insuffici...

CVE-2009-4903

CVE-2009-4903 describes a Cross-site Scripting (XSS) flaw in the web app oBlog . The vulnerability is in the file index.php and is exploitable via the search parameter , allowing remote attackers to inject arbitrary script/HTML. The NVD entry notes a non-authoritative provenance (“NOTE: the prove...

CVE-2009-4907

CVE-2009-4907 describes multiple CSRF vulnerabilities in oBlog that allow remote attackers to hijack administrator sessions and perform admin actions such as changing passwords, forcing logouts, altering post visibility, removing links, and changing blog name fields. The initial records do not sp...

CVE-2009-4908

CVE-2009-4908 describes multiple cross-site scripting (XSS) vulnerabilities in the oBlog platform. The issues enable remote attackers to inject arbitrary script/HTML via the following parameters: article.php (commentName, commentEmail, commentWeb, commentText); admin/write.php (article_id, title)...

CVE-2009-4909

The provided documents identify CVE-2009-4909 as a vulnerability in oBlog’s admin/index.php that allows remote attackers to perform brute-force password guessing via HTTP requests. This mode cites concrete details: affected component is the oBlog admin login, and the root cause is insufficient pr...