Vulnerabilities

TI-2017-13174 CVE-2017-17950 · GHSA-8xmq-wjw5-pxrq

Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.

MEDIUM 40

Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2017-12-28 No fix listed CWE-89

TI-2017-13173 CVE-2017-17949 · GHSA-w2vg-2g93-23j6

LOW 28

Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2017-12-28 No fix listed CWE-79

TI-2017-13172 CVE-2017-17948 · GHSA-gg4x-m58x-wxg7

LOW 28

Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2017-12-28 No fix listed CWE-79