Grayscale

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Grayscale records in CISA KEV

No Grayscale vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bandsite Cms 4 records LOW Grayscale Blog 3 records LOW

Records

3 records in Grayscale Blog · all components

TI-2007-01374 CVE-2007-1432 · GHSA-3m69-p4vj-fwj2

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain…

LOW 37

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter to add_users.php, and unspecified paramete…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02409 Published 2007-03-13 No fix listed

TI-2007-01376 CVE-2007-1434 · GHSA-cg8q-xc66-pj63

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might…

LOW 35

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01044 Published 2007-03-13 No fix listed

TI-2007-01375 CVE-2007-1433 · GHSA-c344-4ghj-wm29

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier…

LOW 23

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/addblog_comment.php an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01575 Published 2007-03-13 No fix listed

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0