Vulnerabilities

TI-2008-02567 CVE-2008-2685 · GHSA-67r6-5wx9-ffwj

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows…

LOW 35

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01051 Published 2008-06-12 No fix listed CWE-89

TI-2008-02516 CVE-2008-2626 · GHSA-r766-h5wh-3jf8

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote…

LOW 35

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01196 Published 2008-06-10 No fix listed CWE-89

TI-2007-00073 CVE-2007-0078 · GHSA-g237-5cc4-cmqg

BattleBlog stores sensitive information under the web root with insufficient access…

LOW 26

BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01469 Published 2007-01-05 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows…

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote…

BattleBlog stores sensitive information under the web root with insufficient access…