Vulnerabilities

TI-2012-03662 CVE-2012-4282 · GHSA-2p85-7pjm-gp5r

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to…

LOW 37

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02224 Published 2012-08-13 No fix listed CWE-89

TI-2008-02097 CVE-2008-2185 · GHSA-grxf-j3r9-gm48

Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows…

LOW 24

Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01884 Published 2008-05-13 No fix listed CWE-22

TI-2008-02096 CVE-2008-2184 · GHSA-w9vg-6rfv-9833

Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote…

LOW 35

Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login para…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00961 Published 2008-05-13 No fix listed CWE-89

TI-2008-02095 CVE-2008-2183 · GHSA-5xp9-q7v3-v432

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote…

LOW 35

SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01109 Published 2008-05-13 No fix listed CWE-89

TI-2008-01878 CVE-2008-1955 · GHSA-q8gx-86f5-jmw2

Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12…

LOW 23

Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script or HTML via the id parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01449 Published 2008-04-25 No fix listed CWE-79