Mywebland

Records35All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

Mywebland records in CISA KEV

No Mywebland vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mybloggie 21 records MEDIUM Myevent 7 records MEDIUM Minibloggie 4 records MEDIUM Mystats 2 records LOW Bloggie Lite 1 record LOW

Records

4 records in Minibloggie · all components

TI-2006-04028 CVE-2006-4163 · GHSA-jxph-qx6w-9c2j

PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie…

MEDIUM 40

PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04164 Published 2006-08-16 No fix listed

TI-2006-00403 CVE-2006-0417 · GHSA-772h-8fh5-mpx9

SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when…

LOW 37

SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2)…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01993 Published 2006-01-25 No fix listed

TI-2008-04411 CVE-2008-4628 · GHSA-gvx9-jx4p-4rcm

SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote…

LOW 35

SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01042 Published 2008-10-21 No fix listed CWE-89

TI-2008-06339 CVE-2008-6650 · GHSA-fg74-vvpx-v5rr

del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct…

LOW 27

del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a different vulnerability than CVE-2008-4628.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01962 Published 2009-04-07 No fix listed CWE-264

Open these records in search →

Critical	1
High	21
Medium	12
Low	1
No CVSS	0