Blogphp

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Blogphp records in CISA KEV

No Blogphp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blogphp 5 records MEDIUM

Records

5 records

TI-2008-06434 CVE-2008-6745 · GHSA-943w-xvvv-p8x3

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a…

MEDIUM 42

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0594 Published 2009-04-23 No fix listed CWE-20

TI-2008-00646 CVE-2008-0678 · GHSA-mrwx-j9cq-447w

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to…

LOW 32

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00939 Published 2008-02-12 No fix listed CWE-89

TI-2008-02416 CVE-2008-2524 · GHSA-6qhp-jhx6-4vrq

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or…

LOW 25

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field in a cookie.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01286 Published 2008-06-03 No fix listed CWE-287

TI-2008-06320 CVE-2008-6631 · GHSA-53jc-h8q7-w586

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user parameter in a sendmessage action and the (2) username parame…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01718 Published 2009-04-07 No fix listed CWE-79

TI-2008-00647 CVE-2008-0679 · GHSA-92cc-ggv3-9g6m

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01507 Published 2008-02-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0