Vulnerabilities

TI-2008-06303 CVE-2008-6613 · GHSA-r42m-2368-q532

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote…

LOW 38

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02447 Published 2009-04-06 No fix listed CWE-264

TI-2008-06302 CVE-2008-6612 · GHSA-38r6-9vxj-5mjq

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows…

LOW 36

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03373 Published 2009-04-06 No fix listed CWE-94

TI-2008-06301 CVE-2008-6611 · GHSA-9m39-jqfc-gx9p

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01151 Published 2009-04-06 No fix listed CWE-89

Vulnerabilities

Filters

uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote…

Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows…

SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to…