Vulnerabilities

TI-2009-03882 CVE-2009-4093 · GHSA-28fw-fj88-q3vr

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in comments.php in Simplog 0.9.3.2, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cname (Name) or (2) email parameters…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03907 Published 2009-11-27 No fix listed CWE-79

TI-2009-03881 CVE-2009-4092 · GHSA-25fr-wqcg-x83x

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and…

LOW 38

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentication of administrators and users for requests that change passwords.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0534 Published 2009-11-27 No fix listed CWE-352

TI-2009-03880 CVE-2009-4091 · GHSA-8wrv-rqg2-m3fr

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access…

LOW 32

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments via the (1) edit or (2) del action.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06354 Published 2009-11-27 No fix listed CWE-264

TI-2006-05210 CVE-2006-5398 · GHSA-4pjv-f5wq-2hcp

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to…

LOW 35

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0127 Published 2006-10-18 No fix listed

TI-2006-03933 CVE-2006-4058 · GHSA-xj4j-2r6r-jmj6

Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier…

LOW 33

Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01488 Published 2006-08-10 No fix listed

TI-2006-01974 CVE-2006-2029 · GHSA-52vp-j58h-c47p

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow…

LOW 33

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02356 Published 2006-04-26 No fix listed

TI-2006-01973 CVE-2006-2028 · GHSA-3p37-f5jm-24mc

Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog…

LOW 31

Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the imagedir parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02736 Published 2006-04-26 No fix listed

TI-2006-01725 CVE-2006-1779 · GHSA-x273-rvp7-p6jc

Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2…

LOW 39

Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05904 Published 2006-04-13 No fix listed

TI-2006-01724 CVE-2006-1778 · GHSA-68pg-xjgm-hfcw

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow…

MEDIUM 40

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m an…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0439 Published 2006-04-13 No fix listed

TI-2006-01723 CVE-2006-1777 · GHSA-f2qx-g7w7-822c

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and…

MEDIUM 45

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the s parameter, a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09995 Published 2006-04-13 No fix listed

TI-2006-01722 CVE-2006-1776 · GHSA-rm94-5rv4-rhh4

PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2…

MEDIUM 47

PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.12989 Published 2006-04-13 No fix listed

TI-2006-01041 CVE-2006-1073 · GHSA-xccw-v28q-j2c8

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier…

LOW 34

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03142 Published 2006-03-08 No fix listed

TI-2006-01040 CVE-2006-1072 · GHSA-4368-2cqv-7wjv

Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows…

LOW 22

Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01177 Published 2006-03-08 No fix listed

TI-2005-02907 CVE-2005-3076 · GHSA-xm2v-m533-mq6r

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger…

LOW 36

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blog…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01549 Published 2005-09-27 No fix listed

Vulnerabilities

Filters