Blogcms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Blogcms records in CISA KEV

No Blogcms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blog 2 records LOW

Records

2 records

TI-2010-04473 CVE-2010-4750 · GHSA-4m2p-3mq4-6fxc

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS…

LOW 32

Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01021 Published 2011-03-01 No fix listed CWE-352

TI-2010-04472 CVE-2010-4749 · GHSA-j586-wg76-c652

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02016 Published 2011-03-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0