CVE-2010-4917
- EPSS 1.41%
- Veröffentlicht 08.10.2011 10:55:07
- Zuletzt bearbeitet 11.04.2025 00:51:21
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.
CVE-2008-0676
- EPSS 0.31%
- Veröffentlicht 12.02.2008 01:00:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Cross-site scripting (XSS) vulnerability in search.php in A-Blog 2 allows remote attackers to inject arbitrary web script or HTML via the words parameter.
CVE-2008-0677
- EPSS 0.25%
- Veröffentlicht 12.02.2008 01:00:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
SQL injection vulnerability in blog.php in A-Blog 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a news action.
CVE-2006-6729
- EPSS 0.89%
- Veröffentlicht 26.12.2006 21:28:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2006-5135
- EPSS 5.34%
- Veröffentlicht 03.10.2006 04:03:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) open_box, (2) middle_box, and (3) close_box parameters in (a) sources/myaccount.php; the (4) navigation_end param...
CVE-2006-5092
- EPSS 10.79%
- Veröffentlicht 29.09.2006 20:07:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigation_start parameter.