Vulnerabilities

TI-2006-00361 CVE-2006-0372 · GHSA-h87v-c7r3-grx9

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly…

LOW 36

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly 1.0, allow remote attackers to execute arbitrary SQL commands via the (1) blogphp_username or (2) blogphp_password parameter in a c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01321 Published 2006-01-22 No fix listed

TI-2006-00308 CVE-2006-0318 · GHSA-ppmw-wjmq-4fr9

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is…

LOW 36

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01379 Published 2006-01-19 No fix listed CWE-89

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in config.php in Insane Visions BlogPHP, possibly…

SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is…