lightblog records
2 published records for vendor lightblog.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2008-0632Proof of concept | Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploadinlightblog · lightblog · CWE-264 | Critical9.3 | — | 6.3% | Feb 6, 2008 |
27Monitor | CVE-2007-5374Proof of concept | cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote aulightblog · lightblog · CWE-287 | Medium6.5 | — | 2.1% | Oct 11, 2007 |
- CVE-2008-063239Monitor
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploadin
CriticalCVSS 9.3Proof of conceptEPSS 6%lightblog · lightblogFeb 6, 2008
- CVE-2007-537427Monitor
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote au
MediumCVSS 6.5Proof of conceptEPSS 2%lightblog · lightblogOct 11, 2007