Battleblog

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Battleblog records in CISA KEV

No Battleblog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Battleblog 3 records LOW Battle Blog 1 record LOW

Records

4 records

TI-2009-01525 CVE-2009-1609 · GHSA-rwv7-qvgv-wwff

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows…

LOW 36

Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct reques…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03619 Published 2009-05-11 No fix listed CWE-20

TI-2008-02567 CVE-2008-2685 · GHSA-67r6-5wx9-ffwj

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows…

LOW 35

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-06-12 No fix listed CWE-89

TI-2008-02516 CVE-2008-2626 · GHSA-r766-h5wh-3jf8

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote…

LOW 35

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-06-10 No fix listed CWE-89

TI-2007-00073 CVE-2007-0078 · GHSA-g237-5cc4-cmqg

BattleBlog stores sensitive information under the web root with insufficient access…

LOW 26

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01469 Published 2007-01-05 No fix listed

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0