Foojan

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Foojan records in CISA KEV

No Foojan vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php Weblog 3 records LOW

Records

3 records in Php Weblog · all components

TI-2008-00422 CVE-2008-0447 · GHSA-w6cr-wr7p-2fjf

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote…

LOW 35

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-01-24 No fix listed CWE-89

TI-2005-02585 CVE-2005-2722 · GHSA-2wcf-7wvx-2jw3

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a…

LOW 25

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an er…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01194 Published 2005-08-29 No fix listed

TI-2005-02584 CVE-2005-2721 · GHSA-hrhm-wvpv-3j73

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01752 Published 2005-08-29 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0