VYPR

Blojsom

by Blojsom

CVEs (2)

  • CVE-2006-4829Sep 15, 2006
    risk 0.04cvss —epss 0.09

    Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name…

  • CVE-2006-4830Sep 15, 2006
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate.