Insanely Simple Blog

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Insanely Simple Blog records in CISA KEV

No Insanely Simple Blog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Insanely Simple Blog 2 records LOW

Records

2 records

TI-2007-03770 CVE-2007-3889 · GHSA-m48w-9957-hwr5

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow…

LOW 36

Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via the current_subsection parameter to index.php and other unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01755 Published 2007-07-18 No fix listed

TI-2007-03769 CVE-2007-3888 · GHSA-q49q-f47q-m2gq

Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the search action, possibly related to the term parameter…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01545 Published 2007-07-18 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0