Vulnerabilities

TI-2009-00317 CVE-2009-0337 · GHSA-j7qj-hw73-j3f2

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers…

LOW 35

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0097 Published 2009-01-29 No fix listed CWE-89

TI-2009-00316 CVE-2009-0336 · GHSA-36x2-5xhq-cc55

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient…

LOW 27

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for data…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02286 Published 2009-01-29 No fix listed CWE-264

TI-2009-00315 CVE-2009-0335 · GHSA-j8j4-5jvm-4jxq

Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows…

LOW 23

Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01453 Published 2009-01-29 No fix listed CWE-79

TI-2009-00314 CVE-2009-0334 · GHSA-8388-69rw-fpx2

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers…

LOW 35

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00993 Published 2009-01-29 No fix listed CWE-89

TI-2009-00232 CVE-2009-0249 · GHSA-642r-hg97-vwpm

Katy Whitton RankEm stores sensitive information under the web root with insufficient…

LOW 27

Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02286 Published 2009-01-22 No fix listed CWE-264

TI-2009-00231 CVE-2009-0248 · GHSA-fgg5-cjmq-3qfc

Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows…

LOW 23

Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01475 Published 2009-01-22 No fix listed CWE-79

TI-2008-05305 CVE-2008-5589 · GHSA-47w8-7vqq-wch7

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote…

LOW 35

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) txtpassword parameter (ak…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00997 Published 2008-12-16 No fix listed CWE-89

TI-2008-05304 CVE-2008-5588 · GHSA-x45c-q2vr-rc56

SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers…

LOW 35

SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-12-16 No fix listed CWE-89

Vulnerabilities

Filters