VYPR

Ri Blog

by Michael Romedahl

CVEs (2)

  • CVE-2007-0121Jan 9, 2007
    risk 0.04cvss epss 0.07

    Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

  • CVE-2006-2004Apr 25, 2006
    risk 0.00cvss epss 0.01

    Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.