Vulnerabilities

TI-2008-06163 CVE-2008-6473 · GHSA-cxv4-h4g4-fxp6

_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to…

LOW 33

_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02315 Published 2009-03-16 No fix listed CWE-255

TI-2008-01688 CVE-2008-1760 · GHSA-qvrx-x8ww-hxgw

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow…

LOW 34

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.p…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02267 Published 2008-04-12 No fix listed CWE-94

Vulnerabilities

Filters

_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to…

Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow…