Will Kraft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Will Kraft records in CISA KEV

No Will Kraft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ez-blog 3 records LOW

Records

3 records

TI-2009-04557 CVE-2009-4801 · GHSA-hj2x-qw32-q9rv

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create…

LOW 37

EZ-Blog Beta 1 does not require authentication, which allows remote attackers to create or delete arbitrary posts via requests to PHP scripts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02252 Published 2010-04-23 No fix listed CWE-287

TI-2009-01542 CVE-2009-1626 · GHSA-4vq8-4jhj-wj97

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427…

LOW 35

SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01126 Published 2009-05-12 No fix listed CWE-89

TI-2009-04561 CVE-2009-4805 · GHSA-852r-qhwr-gxfc

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is…

LOW 32

Multiple SQL injection vulnerabilities in EZ-Blog Beta 1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via (1) the storyid parameter to public/view.php or (2) the kill param…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00913 Published 2010-04-23 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0