Vulnerabilities

TI-2008-03724 CVE-2008-3885 · GHSA-p22h-292c-g64q

Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier…

LOW 31

Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make content modifications.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00581 Published 2008-09-02 No fix listed CWE-352

TI-2008-03723 CVE-2008-3884 · GHSA-c6gv-4hpw-7xg8

Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows…

LOW 22

Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2006-6176.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2008-09-02 No fix listed CWE-79

TI-2006-05940 CVE-2006-6176 · GHSA-rj2f-73qg-wm68

Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01414 Published 2006-11-30 No fix listed

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier…

Cross-site scripting (XSS) vulnerability in Blogn (BURO GUN) 1.9.7 and earlier allows…

Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote…