Bblog

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bblog records in CISA KEV

No Bblog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bblog 1 record LOW Wbblog 1 record LOW

Records

2 records

TI-2008-04230 CVE-2008-4436 · GHSA-qcf3-gv89-5gwr

SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows…

LOW 35

SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote attackers to execute arbitrary SQL commands via the mod parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-10-03 No fix listed CWE-89

TI-2004-01740 CVE-2004-1865 · GHSA-2cx4-vf7f-fxv5

Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2…

LOW 24

Cross-site scripting (XSS) vulnerability in the administration panel in bBlog 0.7.2 allows remote authenticated users with superuser privileges to inject arbitrary web script or HTML via a blog name ($blogname).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0096 Published 2005-05-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0