Archangelmgt

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Archangelmgt records in CISA KEV

No Archangelmgt vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weblog 4 records LOW Archangel Weblog 1 record LOW

Records

5 records

TI-2006-00919 CVE-2006-0944 · GHSA-hqq3-qw89-xcg9

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

LOW 39

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0364 Published 2006-03-01 No fix listed

TI-2008-02260 CVE-2008-2356 · GHSA-828m-56hf-mx8h

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows…

LOW 35

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-05-20 No fix listed CWE-89

TI-2006-00920 CVE-2006-0945 · GHSA-h4fq-c9g5-9qmg

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02…

LOW 31

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01309 Published 2006-03-01 No fix listed CWE-94

TI-2007-02486 CVE-2007-2574 · GHSA-pvw4-9q37-8pfv

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote…

LOW 27

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0243 Published 2007-05-09 No fix listed

TI-2006-03966 CVE-2006-4091 · GHSA-5743-x4x3-q75q

Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-08-11 No fix listed

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0