Vulnerabilities

TI-2011-03289 CVE-2011-3732 · GHSA-f9f8-58fc-39mq

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct…

LOW 26

eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by _lib/fckeditor/editor/dialog/fck_spel…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01335 Published 2011-09-23 No fix listed CWE-200

TI-2008-01558 CVE-2008-1626 · GHSA-qx8h-8hpp-f9f9

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute…

LOW 36

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01822 Published 2008-04-02 No fix listed CWE-20

TI-2008-00148 CVE-2008-0159 · GHSA-hc62-39c5-xpm7

SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote…

LOW 34

SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the eggblogpassword parameter in a cookie.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0189 Published 2008-01-09 No fix listed CWE-89

TI-2007-05718 CVE-2007-5980 · GHSA-f4vj-gp62-vjxm

Cross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows…

LOW 23

Cross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01263 Published 2007-11-15 No fix listed CWE-79

TI-2007-02884 CVE-2007-2978 · GHSA-hp47-jvh8-33rq

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to…

LOW 33

Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01499 Published 2007-06-01 No fix listed CWE-59