Blogotext Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Blogotext Project records in CISA KEV

No Blogotext Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blogotext 4 records MEDIUM

Records

4 records

TI-2017-13032 CVE-2017-17794 · GHSA-g924-j772-wx37

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows…

MEDIUM 45

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01544 Published 2017-12-20 No fix listed

TI-2017-13031 CVE-2017-17793 · GHSA-2v3r-g46p-c64j

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in…

LOW 37

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection mechanism, and read backup archives on W…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02166 Published 2017-12-20 No fix listed CWE-200

TI-2017-13030 CVE-2017-17792 · GHSA-ch9q-h28j-4hqm

Cross site scripting (XSS) vulnerability in the markup_clean_href function in…

LOW 29

Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a comment.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01002 Published 2017-12-20 No fix listed CWE-79

TI-2017-10978 CVE-2017-14957 · GHSA-2hff-27rx-7v32

Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows…

LOW 29

Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01054 Published 2017-10-01 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0