Vulnerabilities

TI-2008-02097 CVE-2008-2185 · GHSA-grxf-j3r9-gm48

Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows…

LOW 24

Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01884 Published 2008-05-13 No fix listed CWE-22

TI-2008-02096 CVE-2008-2184 · GHSA-w9vg-6rfv-9833

Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login para…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2008-05-13 No fix listed CWE-89

TI-2008-02095 CVE-2008-2183 · GHSA-5xp9-q7v3-v432

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote…

LOW 35

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01109 Published 2008-05-13 No fix listed CWE-89

Vulnerabilities

Filters

Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows…

Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote…

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote…