Pluggedout

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Pluggedout records in CISA KEV

No Pluggedout vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pluggedout Blog 3 records LOW

Records

3 records in Pluggedout Blog · all components

TI-2006-00546 CVE-2006-0563 · GHSA-35mv-px68-wh6h

SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers…

LOW 38

SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0274 Published 2006-02-06 No fix listed

TI-2005-03844 CVE-2005-4054 · GHSA-v7wp-cq2q-qw3r

SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows…

LOW 35

SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0112 Published 2005-12-07 No fix listed

TI-2006-00545 CVE-2006-0562 · GHSA-j3p5-xrfg-c6j5

Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows…

LOW 24

Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0222 Published 2006-02-06 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0