mywebland kayıtları
mywebland üreticisine ait 35 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 19
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
35 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2007-3194İstismar yok | Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the mywebland · mybloggie | Kritik9,8 | — | %1,5 | 12 Haz 2007 |
31İzleyin | CVE-2006-1890İstismar yok | Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL imywebland · myevent · CWE-94 | Yüksek7,5 | — | %4,4 | 20 Nis 2006 |
31İzleyin | CVE-2006-4163Kavram kanıtı | PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to executemywebland · minibloggie | Yüksek7,5 | — | %4,1 | 16 Ağu 2006 |
31İzleyin | CVE-2006-4040Kavram kanıtı | PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHPmywebland · myevent | Yüksek7,5 | — | %3,4 | 9 Ağu 2006 |
31İzleyin | CVE-2005-1499İstismar yok | delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter.mywebland · mybloggie | Yüksek7,5 | — | %2,6 | 11 May 2005 |
31İzleyin | CVE-2008-4644Kavram kanıtı | hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.mywebland · mystats · CWE-264 | Yüksek7,5 | — | %2,6 | 21 Eki 2008 |
31İzleyin | CVE-2005-1500Kavram kanıtı | Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parammywebland · mybloggie · CWE-89 | Yüksek7,5 | — | %2,5 | 11 May 2005 |
31İzleyin | CVE-2005-4225İstismar yok | Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands vimywebland · mybloggie | Yüksek7,5 | — | %2,0 | 14 Ara 2005 |
31İzleyin | CVE-2006-0417Kavram kanıtı | SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execumywebland · minibloggie | Yüksek7,5 | — | %1,9 | 25 Oca 2006 |
31İzleyin | CVE-2006-4042Kavram kanıtı | Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrarymywebland · mybloggie · CWE-89 | Yüksek7,5 | — | %1,8 | 9 Ağu 2006 |
31İzleyin | CVE-2006-2859İstismar yok | PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in thmywebland · mybloggie | Yüksek7,5 | — | %1,8 | 6 Haz 2006 |
30İzleyin | CVE-2005-3153İstismar yok | login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attmywebland · mybloggie | Yüksek7,5 | — | %1,5 | 5 Eki 2005 |
30İzleyin | CVE-2006-4083İstismar yok | PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via mywebland · myevent | Yüksek7,5 | — | %1,4 | 11 Ağu 2006 |
30İzleyin | CVE-2006-3905İstismar yok | SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parametmywebland · mybloggie | Yüksek7,5 | — | %1,4 | 27 Tem 2006 |
30İzleyin | CVE-2005-2838İstismar yok | SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via tmywebland · mybloggie | Yüksek7,5 | — | %1,3 | 7 Eyl 2005 |
30İzleyin | CVE-2007-3353İstismar yok | PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a mywebland · myevent | Yüksek7,5 | — | %1,3 | 22 Haz 2007 |
30İzleyin | CVE-2006-1907İstismar yok | Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the event_id parameter to mywebland · myevent | Yüksek7,5 | — | %1,2 | 20 Nis 2006 |
30İzleyin | CVE-2008-4628Kavram kanıtı | SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_imywebland · minibloggie · CWE-89 | Yüksek7,5 | — | %1,0 | 20 Eki 2008 |
30İzleyin | CVE-2008-4650Kavram kanıtı | SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate paramywebland · myevent · CWE-89 | Yüksek7,5 | — | %1,0 | 21 Eki 2008 |
30İzleyin | CVE-2007-3003Kavram kanıtı | Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cmywebland · mybloggie | Yüksek7,5 | — | %1,0 | 4 Haz 2007 |
30İzleyin | CVE-2008-4643Kavram kanıtı | SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby paramemywebland · mystats · CWE-89 | Yüksek7,5 | — | %1,0 | 21 Eki 2008 |
30İzleyin | CVE-2008-5004Kavram kanıtı | SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands vmywebland · bloggie lite · CWE-89 | Yüksek7,5 | — | %0,9 | 10 Kas 2008 |
28İzleyin | CVE-2007-0353Kavram kanıtı | Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary wmywebland · mybloggie | Orta6,8 | — | %2,7 | 18 Oca 2007 |
24İzleyin | CVE-2006-3903İstismar yok | CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and mywebland · mybloggie | Orta5,8 | — | %2,1 | 27 Tem 2006 |
21İzleyin | CVE-2008-6650Kavram kanıtı | del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a diffemywebland · minibloggie · CWE-264 | Orta5,0 | — | %1,9 | 7 Nis 2009 |
- CVE-2007-319439İzleyin
Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the
KritikCVSS 9,8İstismar yokEPSS %1mywebland · mybloggie12 Haz 2007
- CVE-2006-189031İzleyin
Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL i
YüksekCVSS 7,5İstismar yokEPSS %4mywebland · myevent20 Nis 2006
- CVE-2006-416331İzleyin
PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute
YüksekCVSS 7,5Kavram kanıtıEPSS %4mywebland · minibloggie16 Ağu 2006
- CVE-2006-404031İzleyin
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP
YüksekCVSS 7,5Kavram kanıtıEPSS %3mywebland · myevent9 Ağu 2006
- CVE-2005-149931İzleyin
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter.
YüksekCVSS 7,5İstismar yokEPSS %2mywebland · mybloggie11 May 2005
- CVE-2008-464431İzleyin
hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header.
YüksekCVSS 7,5Kavram kanıtıEPSS %2mywebland · mystats21 Eki 2008
- CVE-2005-150031İzleyin
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword param
YüksekCVSS 7,5Kavram kanıtıEPSS %2mywebland · mybloggie11 May 2005
- CVE-2005-422531İzleyin
Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands vi
YüksekCVSS 7,5İstismar yokEPSS %2mywebland · mybloggie14 Ara 2005
- CVE-2006-041731İzleyin
SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execu
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · minibloggie25 Oca 2006
- CVE-2006-404231İzleyin
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · mybloggie9 Ağu 2006
- CVE-2006-285931İzleyin
PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in th
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · mybloggie6 Haz 2006
- CVE-2005-315330İzleyin
login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection att
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · mybloggie5 Eki 2005
- CVE-2006-408330İzleyin
PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · myevent11 Ağu 2006
- CVE-2006-390530İzleyin
SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id paramet
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · mybloggie27 Tem 2006
- CVE-2005-283830İzleyin
SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via t
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · mybloggie7 Eyl 2005
- CVE-2007-335330İzleyin
PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · myevent22 Haz 2007
- CVE-2006-190730İzleyin
Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the event_id parameter to
YüksekCVSS 7,5İstismar yokEPSS %1mywebland · myevent20 Nis 2006
- CVE-2008-462830İzleyin
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_i
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · minibloggie20 Eki 2008
- CVE-2008-465030İzleyin
SQL injection vulnerability in viewevent.php in myEvent 1.6 allows remote attackers to execute arbitrary SQL commands via the eventdate para
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · myevent21 Eki 2008
- CVE-2007-300330İzleyin
Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) c
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · mybloggie4 Haz 2007
- CVE-2008-464330İzleyin
SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parame
YüksekCVSS 7,5Kavram kanıtıEPSS %1mywebland · mystats21 Eki 2008
- CVE-2008-500430İzleyin
SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands v
YüksekCVSS 7,5Kavram kanıtıEPSS %0mywebland · bloggie lite10 Kas 2008
- CVE-2007-035328İzleyin
Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary w
OrtaCVSS 6,8Kavram kanıtıEPSS %2mywebland · mybloggie18 Oca 2007
- CVE-2006-390324İzleyin
CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and
OrtaCVSS 5,8İstismar yokEPSS %2mywebland · mybloggie27 Tem 2006
- CVE-2008-665021İzleyin
del.php in miniBloggie 1.0 allows remote attackers to delete arbitrary posts via a direct request with a modified post_id parameter, a diffe
OrtaCVSS 5,0Kavram kanıtıEPSS %1mywebland · minibloggie7 Nis 2009