Vulnerabilities

TI-2006-00302 CVE-2006-0312 · GHSA-qf7m-wxgr-9mrr

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create…

LOW 28

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0293 Published 2006-01-19 No fix listed

TI-2006-00301 CVE-2006-0311 · GHSA-5rm2-7cjr-5c65

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to…

LOW 37

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0187 Published 2006-01-19 No fix listed

TI-2006-00300 CVE-2006-0310 · GHSA-q2fr-r43q-75cq

Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to…

LOW 24

Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02126 Published 2006-01-19 No fix listed

Vulnerabilities

Filters

create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create…

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to…

Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to…