VYPR

Flashblog

by Flashblog

CVEs (2)

  • CVE-2008-2574Jun 6, 2008
    risk 0.04cvss epss 0.07

    Unrestricted file upload vulnerability in admin/Editor/imgupload.php in FlashBlog 0.31 beta allows remote attackers to execute arbitrary code by uploading a .php file, then accessing it via a direct request to the file in tus_imagenes/.

  • CVE-2008-2572Jun 6, 2008
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in php/leer_comentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articulo_id parameter.