Vulnerabilities

TI-2007-03345 CVE-2007-3451 · GHSA-39xg-qc4x-j5fj

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote…

LOW 34

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02788 Published 2007-06-27 No fix listed

TI-2007-03344 CVE-2007-3450 · GHSA-jwhj-49m2-63w7

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute…

LOW 32

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the member parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0083 Published 2007-06-27 No fix listed

TI-2007-03343 CVE-2007-3449 · GHSA-485h-jr34-7f93

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute…

LOW 32

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01144 Published 2007-06-27 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote…

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute…

SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute…