Vulnerabilities

TI-2007-00776 CVE-2007-0798 · GHSA-8qh8-q8w7-39v7

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; and allow remote authenticated users to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02043 Published 2007-02-06 No fix listed

TI-2005-01901 CVE-2005-2010 · GHSA-cqrq-3x4q-gjcp

Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows…

LOW 26

Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03617 Published 2005-06-20 No fix listed

TI-2005-00881 CVE-2005-0938 · GHSA-m7gp-gx54-pqw7

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows…

LOW 26

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01388 Published 2005-03-30 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote…

Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows…

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows…