Vulnerabilities

TI-2009-03502 CVE-2009-3666 · GHSA-m57q-6hfr-75q7

Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote…

LOW 25

Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote attackers to inject arbitrary web script or HTML via the e parameter in an error action.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02967 Published 2009-10-11 No fix listed CWE-79

TI-2009-03501 CVE-2009-3665 · GHSA-h9qh-wvqp-pffp

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote…

LOW 37

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02082 Published 2009-10-11 No fix listed CWE-89

TI-2009-03500 CVE-2009-3664 · GHSA-48q7-r6r9-rhx2

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow…

MEDIUM 42

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to include or execute arbitrary files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05974 Published 2009-10-11 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in index.php in Nullam Blog 0.1.2 allows remote…

Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote…

Multiple directory traversal vulnerabilities in index.php in Nullam Blog 0.1.2 allow…