Uapplication

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Uapplication records in CISA KEV

No Uapplication vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uphotogallery 4 records LOW Ublog Reload 3 records LOW Ublog 2 records LOW Uguestbook 1 record LOW

Records

3 records in Ublog Reload · all components

TI-2005-01901 CVE-2005-2010 · GHSA-cqrq-3x4q-gjcp

Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows…

LOW 26

Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03617 Published 2005-06-20 No fix listed

TI-2005-00881 CVE-2005-0938 · GHSA-m7gp-gx54-pqw7

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows…

LOW 26

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2005-03-30 No fix listed

TI-2007-00776 CVE-2007-0798 · GHSA-8qh8-q8w7-39v7

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; and allow remote authenticated users to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02043 Published 2007-02-06 No fix listed

Open these records in search →

Critical	0
High	3
Medium	7
Low	0
No CVSS	0