Vendors / Mike Helton Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Mike Helton records in CISA KEV No Mike Helton vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0187 · Published 2006-01-19 · No fix listed
Priority LOW 28
create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0293 · Published 2006-01-19 · No fix listed
Priority LOW 24
Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02126 · Published 2006-01-19 · No fix listed
Open these records in search → All records by CVSS severity
0 1 2 0 0
