Ar-blog

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ar-blog records in CISA KEV

No Ar-blog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ar-blog 5 records LOW

Records

5 records

TI-2005-03318 CVE-2005-3495 · GHSA-r7gw-9vvq-w4x5

Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.

LOW 36

Ar-blog 5.2 and earlier allows remote attackers to bypass authentication by modifying cookies.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01635 Published 2005-11-04 No fix listed

TI-2006-01838 CVE-2006-1893 · GHSA-q2rw-c3gv-gpp3

Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote…

LOW 34

Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02 Published 2006-04-20 No fix listed

TI-2006-02717 CVE-2006-2809 · GHSA-vv73-r7c6-ggq2

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) count parameter, and possibly the (2) next, (3) Year_the_news, and…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01295 Published 2006-06-05 No fix listed

TI-2005-03317 CVE-2005-3494 · GHSA-p2rv-c467-4vgq

Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in Ar-blog 5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog comment.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01255 Published 2005-11-04 No fix listed

TI-2006-00322 CVE-2006-0333 · GHSA-prhq-wgh2-766w

Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject…

LOW 22

Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2006-01-21 No fix listed

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0