blogphp kayıtları
blogphp üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
32İzleyin | CVE-2008-6745Kavram kanıtı | index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.blogphp · blogphp · CWE-20 | Yüksek7,5 | — | %5,9 | 23 Nis 2009 |
27İzleyin | CVE-2008-0678Kavram kanıtı | SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a blogphp · blogphp · CWE-89 | Orta6,8 | — | %0,9 | 11 Şub 2008 |
20İzleyin | CVE-2008-2524İstismar yok | BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified bloblogphp · blogphp · CWE-287 | Orta5,0 | — | %1,3 | 3 Haz 2008 |
18İzleyin | CVE-2008-6631Kavram kanıtı | Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTMblogphp · blogphp · CWE-79 | Orta4,3 | — | %1,7 | 7 Nis 2009 |
17İzleyin | CVE-2008-0679Kavram kanıtı | Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the blogphp · blogphp · CWE-79 | Orta4,3 | — | %1,5 | 11 Şub 2008 |
- CVE-2008-674532İzleyin
index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.
YüksekCVSS 7,5Kavram kanıtıEPSS %6blogphp · blogphp23 Nis 2009
- CVE-2008-067827İzleyin
SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a
OrtaCVSS 6,8Kavram kanıtıEPSS %1blogphp · blogphp11 Şub 2008
- CVE-2008-252420İzleyin
BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blo
OrtaCVSS 5,0İstismar yokEPSS %1blogphp · blogphp3 Haz 2008
- CVE-2008-663118İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTM
OrtaCVSS 4,3Kavram kanıtıEPSS %2blogphp · blogphp7 Nis 2009
- CVE-2008-067917İzleyin
Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the
OrtaCVSS 4,3Kavram kanıtıEPSS %2blogphp · blogphp11 Şub 2008