Abweb

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Abweb records in CISA KEV

No Abweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minimal-ablog 2 records LOW Minimal Ablog 1 record LOW

Records

3 records

TI-2008-06303 CVE-2008-6613 · GHSA-r42m-2368-q532

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote…

LOW 38

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02447 Published 2009-04-06 No fix listed CWE-264

TI-2008-06302 CVE-2008-6612 · GHSA-38r6-9vxj-5mjq

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows…

LOW 36

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03373 Published 2009-04-06 No fix listed CWE-94

TI-2008-06301 CVE-2008-6611 · GHSA-9m39-jqfc-gx9p

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2009-04-06 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0