Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Tuxplanet Clear all filters
TI-2008-03165 CVE-2008-3304 · GHSA-3g9j-3prp-r5vg

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an…

Priority LOW 32

BilboBlog 0.2.1 allows remote attackers to obtain sensitive information via (1) an enable_cache=false query string to footer.php or (2) a direct request to pagination.php, which reveals the installation path in an error…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06091 Published 2008-07-25 No fix listed CWE-200
TI-2008-03164 CVE-2008-3303 · GHSA-926x-7qx8-c8j2

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote…

Priority LOW 38

admin/login.php in BilboBlog 0.2.1, when register_globals is enabled, allows remote attackers to bypass authentication and obtain administrative access via a direct request that sets the login, admin_login, password, and…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05397 Published 2008-07-25 No fix listed CWE-264
TI-2008-03162 CVE-2008-3301 · GHSA-r6wq-vrxj-qwhf

Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote…

Priority LOW 21

Multiple cross-site scripting (XSS) vulnerabilities in BilboBlog 0.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) content parameter to admin/update.php, related to confli…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.0243 Published 2008-07-25 No fix listed CWE-79