Vulnerabilities

TI-2007-01376 CVE-2007-1434 · GHSA-cg8q-xc66-pj63

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might…

LOW 35

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) userdetail.php, id and (2) url parameter…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01044 Published 2007-03-13 No fix listed

TI-2007-01375 CVE-2007-1433 · GHSA-c344-4ghj-wm29

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier…

LOW 23

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fields to (1) scripts/addblog_comment.php an…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01575 Published 2007-03-13 No fix listed

TI-2007-01374 CVE-2007-1432 · GHSA-3m69-p4vj-fwj2

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain…

LOW 37

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter to add_users.php, and unspecified paramete…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02409 Published 2007-03-13 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might…

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier…

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain…