Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Sphpblog Component: Sphpblog Clear all filters
TI-2007-05356 CVE-2007-5572 · GHSA-x5gq-w47v-78jg

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog)…

Priority LOW 21

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete actions as administrators via (1) the block_id parameter to add_block.php or (2) the…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00547 Published 2007-10-18 No fix listed CWE-352
TI-2006-05800 CVE-2006-6032 · GHSA-wj69-4pwf-5mc7

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog)…

Priority LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter in add_block.php or (2) the en…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01271 Published 2006-11-21 No fix listed