Vulnerabilities

TI-2008-00422 CVE-2008-0447 · GHSA-w6cr-wr7p-2fjf

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote…

LOW 35

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote attackers to execute arbitrary SQL commands via the story parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-01-24 No fix listed CWE-89

TI-2005-02585 CVE-2005-2722 · GHSA-2wcf-7wvx-2jw3

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a…

LOW 25

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a direct request to /daylinks/index.php or (2) a negative value in the daylinkspage parameter to index.php, which reveal the path in an er…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01194 Published 2005-08-29 No fix listed

TI-2005-02584 CVE-2005-2721 · GHSA-hrhm-wvpv-3j73

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in Foojan PHP Weblog allow remote attackers to inject arbitrary web script or HTML via the Referer field in the HTTP header.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01752 Published 2005-08-29 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in index.php in Foojan WMS PHP Weblog 1.0 allows remote…

Foojan PHP Weblog allows remote attackers to obtain sensitive information via (1) a…

Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php or (2) admin.php in…