Vulnerabilities

TI-2007-04741 CVE-2007-4919 · GHSA-3h7j-gprx-76w7

Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute…

LOW 35

Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary S…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00989 Published 2007-09-17 No fix listed CWE-89

TI-2007-03851 CVE-2007-3974 · GHSA-8hhr-gmc5-rh68

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote…

LOW 39

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0367 Published 2007-07-25 No fix listed

TI-2007-03850 CVE-2007-3973 · GHSA-2vvq-r7r7-rh56

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers…

LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02772 Published 2007-07-25 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute…

admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers…