Vulnerabilities

TI-2009-02439 CVE-2009-2553 · GHSA-xmfm-x5xv-628r

Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4…

LOW 34

Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01953 Published 2009-07-20 No fix listed CWE-89

TI-2009-02438 CVE-2009-2552 · GHSA-44q3-f2xv-x29r

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script…

LOW 34

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01979 Published 2009-07-20 No fix listed CWE-22

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4…

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script…