Uapplication - vulnerabilities (CVEs)
10 CVEs in 4 products, 0 in the last 30 days, newest from 2007-02-07.
Products
- Uphotogallery - 4 CVEs
- Ublog Reload - 3 CVEs
- Ublog - 2 CVEs
- Uguestbook - 1 CVEs
Newest CVEs of Uapplication
- CVE-2007-0815 - CVSS 4.3 (medium), 2007-02-07: Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote authenticated administrators to inject…
- CVE-2007-0799 - CVSS 7.5 (high), 2007-02-06: SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
- CVE-2007-0798 - CVSS 4.3 (medium), 2007-02-06: Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified…
- CVE-2006-6247 - CVSS 7.5 (high), 2006-12-04: Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1)…
- CVE-2006-3023 - CVSS 4.3 (medium), 2006-06-15: Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary…
- CVE-2006-2246 - CVSS 5.8 (medium), 2006-05-09: Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when…
- CVE-2005-2010 - CVSS 4.3 (medium), 2005-06-20: Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle…
- CVE-2005-1427 - CVSS 7.5 (high), 2005-05-03: Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request…
- CVE-2005-1425 - CVSS 5 (medium), 2005-05-03: Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a…
- CVE-2005-0938 - CVSS 5 (medium), 2005-05-02: Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct…
