Vendors / Webblizzard Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Webblizzard records in CISA KEV No Webblizzard vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01468 · Published 2007-04-11 · No fix listed CWE-287
Priority LOW 35
SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01006 · Published 2008-07-11 · No fix listed CWE-89
Priority LOW 22
Cross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote attackers to inject arbitrary web script or HTML via the Suchzeile parameter.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01087 · Published 2007-04-11 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0