Vulnerabilities

TI-2008-00602 CVE-2008-0632 · GHSA-f7pv-mwq4-v6qp

Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows…

MEDIUM 49

Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06363 Published 2008-02-06 No fix listed CWE-264

TI-2007-05162 CVE-2007-5374 · GHSA-45rh-4228-3jmv

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when…

LOW 33

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02185 Published 2007-10-11 No fix listed CWE-287

Vulnerabilities

Filters

Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows…

cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when…