Vulnerabilities

TI-2008-02260 CVE-2008-2356 · GHSA-828m-56hf-mx8h

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows…

LOW 35

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-05-20 No fix listed CWE-89

TI-2007-02486 CVE-2007-2574 · GHSA-pvw4-9q37-8pfv

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote…

LOW 27

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0243 Published 2007-05-09 No fix listed

TI-2006-03966 CVE-2006-4091 · GHSA-5743-x4x3-q75q

Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0118 Published 2006-08-11 No fix listed

TI-2006-00920 CVE-2006-0945 · GHSA-h4fq-c9g5-9qmg

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02…

LOW 31

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01309 Published 2006-03-01 No fix listed CWE-94

TI-2006-00919 CVE-2006-0944 · GHSA-hqq3-qw89-xcg9

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

LOW 39

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0364 Published 2006-03-01 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows…

Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel…

PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02…

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.