Vulnerabilities

TI-2005-01236 CVE-2005-1310 · GHSA-fwwh-grhm-2wf9

SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary…

LOW 36

SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01316 Published 2005-04-27 No fix listed

TI-2005-01235 CVE-2005-1309 · GHSA-6353-x462-8qg9

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject…

LOW 23

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0125 Published 2005-04-27 No fix listed

TI-2004-01446 CVE-2004-1570 · GHSA-wx5p-jq7w-xjqv

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01211 Published 2005-02-20 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary…

Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject…

SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute…