Vendors / Mzbservices Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Mzbservices records in CISA KEV No Mzbservices vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request.
CVSS 2.0 MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.02958 · Published 2009-02-02 · No fix listed CWE-264
Priority LOW 32
SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01105 · Published 2009-02-03 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
0 0 2 0 0
