Drumster

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Drumster records in CISA KEV

No Drumster vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Blogme 3 records LOW

Records

3 records

TI-2007-02572 CVE-2007-2661 · GHSA-9jm8-7q7r-mfj7

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to…

LOW 35

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01224 Published 2007-05-14 No fix listed

TI-2006-05758 CVE-2006-5976 · GHSA-p8fg-cfcq-5gpc

Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01228 Published 2006-11-20 No fix listed

TI-2006-05757 CVE-2006-5975 · GHSA-j2gm-493c-h454

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02093 Published 2006-11-20 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0