Skip to content
Noroxi

pblang records

11 published records for vendor pblang.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      11 records
      • CVE-2007-1052
        41Plan

        PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code

        CriticalCVSS 10.0No exploitEPSS 2%

        pblang · pblangFeb 21, 2007

      • CVE-2006-5062
        31Monitor

        PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to ex

        HighCVSS 7.5Proof of conceptEPSS 2%

        pblang · pblangSep 27, 2006

      • CVE-2005-2893
        31Monitor

        Direct static code injection vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to execut

        HighCVSS 7.5No exploitEPSS 2%

        pblang · pblangSep 14, 2005

      • CVE-2007-3096
        28Monitor

        Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled, allows remote attac

        MediumCVSS 6.8Proof of conceptEPSS 2%

        pblang · pblangJun 6, 2007

      • CVE-2005-2892
        21Monitor

        Directory traversal vulnerability in setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to read arbitrary

        MediumCVSS 5.0Proof of conceptEPSS 3%

        pblang · pblangSep 14, 2005

      • CVE-2005-2895
        21Monitor

        setcookie.php in PBLang 4.65, and possibly earlier versions, allows remote attackers to obtain sensitive information via a %00 (a null byte)

        MediumCVSS 5.0No exploitEPSS 2%

        pblang · pblangSep 14, 2005

      • CVE-2005-3919
        18Monitor

        Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML via multiple fields i

        MediumCVSS 4.3Proof of conceptEPSS 1%

        pblang · pblangNov 30, 2005

      • CVE-2005-0526
        17Monitor

        Multiple cross-site scripting (XSS) vulnerabilities in PBLang 4.65 allow remote attackers to inject arbitrary web script or HTML via (1) the

        MediumCVSS 4.3No exploitEPSS 1%

        pblang · pblangMay 2, 2005

      • CVE-2005-2894
        17Monitor

        Cross-site scripting (XSS) vulnerability in the user registration in PBLang 4.65, and possibly earlier versions, allows remote attackers to

        MediumCVSS 4.3No exploitEPSS 1%

        pblang · pblangSep 14, 2005

      • CVE-2005-0630
        9Monitor

        sendpm.php in PBLang 4.63 allows remote authenticated users to read arbitrary files via a full pathname in the orig parameter.

        LowCVSS 2.1No exploitEPSS 1%

        pblang · pblangMar 1, 2005

      • CVE-2005-0631
        8Monitor

        delpm.php in PBLang 4.63 allows remote authenticated users to delete arbitrary PM files by modifying the "id" and "a" parameters.

        LowCVSS 2.1No exploitEPSS 1%

        pblang · pblangMar 1, 2005