Blogphp - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2009-04-23.

Products

• Blogphp - 5 CVEs

Newest CVEs of Blogphp

• CVE-2008-6745 - CVSS 7.5 (high), 2009-04-23: index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
• CVE-2008-6631 - CVSS 4.3 (medium), 2009-04-07: Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user…
• CVE-2008-2524 - CVSS 5 (medium), 2008-06-03: BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username…
• CVE-2008-0679 - CVSS 4.3 (medium), 2008-02-12: Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
• CVE-2008-0678 - CVSS 6.8 (medium), 2008-02-12: SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.