Vulnerabilities

TI-2007-01912 CVE-2007-1990 · GHSA-vg9j-j27r-chqg

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0…

LOW 35

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, a different vector than CVE-2007-196…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01194 Published 2007-04-12 No fix listed

TI-2007-01891 CVE-2007-1969 · GHSA-3jfw-6cv8-rr6m

Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote…

LOW 22

Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0093 Published 2007-04-11 No fix listed

TI-2007-01890 CVE-2007-1968 · GHSA-2vhh-5prh-9mm6

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0…

LOW 36

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03386 Published 2007-04-11 No fix listed

Vulnerabilities

Filters

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0…

Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote…

PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0…