Battleblog

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Battleblog records in CISA KEV

No Battleblog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Battleblog 3 records LOW Battle Blog 1 record LOW

Records

3 records in Battleblog · all components

TI-2008-02567 CVE-2008-2685 · GHSA-67r6-5wx9-ffwj

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows…

LOW 35

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-06-12 No fix listed CWE-89

TI-2008-02516 CVE-2008-2626 · GHSA-r766-h5wh-3jf8

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote…

LOW 35

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-06-10 No fix listed CWE-89

TI-2007-00073 CVE-2007-0078 · GHSA-g237-5cc4-cmqg

BattleBlog stores sensitive information under the web root with insufficient access…

LOW 26

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01469 Published 2007-01-05 No fix listed

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0