Vulnerabilities

TI-2006-04897 CVE-2006-5081 · GHSA-cx54-c89j-4cqv

PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote…

LOW 36

PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01508 Published 2006-09-29 No fix listed

TI-2006-01737 CVE-2006-1791 · GHSA-fgwg-p679-q8w5

Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers…

LOW 36

Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01776 Published 2006-04-14 No fix listed

TI-2005-04515 CVE-2005-4785 · GHSA-f4xr-4383-7g29

Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote…

LOW 23

Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) author ("your name") and (2) "comment" section.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01429 Published 2006-04-14 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote…

Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers…

Cross-site scripting (XSS) vulnerability in QuickBlogger 1.4 and earlier allows remote…