Birdblog

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Birdblog records in CISA KEV

No Birdblog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Birdblog 5 records LOW

Records

5 records

TI-2005-01503 CVE-2005-1592 · GHSA-gwp7-6x23-ww9g

Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote…

LOW 36

Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Javascript.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01457 Published 2005-05-16 No fix listed

TI-2005-00825 CVE-2005-0882 · GHSA-83g8-mw74-fq9q

SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote…

LOW 36

SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01333 Published 2005-03-26 No fix listed

TI-2006-05975 CVE-2006-6211 · GHSA-wmff-mf7p-jxc8

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to (a) admin/admincore.php, the (2) month parameter to (b) adm…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01952 Published 2006-12-01 No fix listed

TI-2006-04880 CVE-2006-5064 · GHSA-r5m7-mpf3-gfh2

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php,…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.02112 Published 2006-09-28 No fix listed

TI-2014-04346 CVE-2014-5330 · GHSA-2vrc-r3cm-r6h6

Cross-site scripting (XSS) vulnerability in BirdBlog allows remote attackers to inject…

LOW 22

Cross-site scripting (XSS) vulnerability in BirdBlog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2014-10-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0