Mybloggie@2.1.6 Security Vulnerabilities and Issues — Mybloggie@2.1.6 CVE List

Lucene search

MyweblandMybloggie2.1.6

4 matches found

CVE•added 2008/07/09 12:41 a.m.•40 views

CVE-2008-3080

Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators. NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899.

5.1CVSS7.6AI score0.00378EPSS

CVE•added 2008/07/09 12:41 a.m.•37 views

CVE-2007-1899

Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via (2) the post_id parameter...

5.1CVSS8AI score0.00378EPSS

CVE•added 2007/06/04 5:30 p.m.•35 views

CVE-2007-3003

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225.

7.5CVSS8.3AI score0.02117EPSS

CVE•added 2008/07/09 12:41 a.m.•29 views

CVE-2007-3650

myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in v...

5.3CVSS6.2AI score0.00254EPSS