Loudblog
Products
1- 7 CVEs
Recent CVEs
7| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2008-0139 | 0.05 | — | 0.22 | Jan 8, 2008 | Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter. | |||
| CVE-2006-0565 | 0.04 | — | 0.09 | Feb 6, 2006 | PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter. | |||
| CVE-2008-6077 | 0.03 | — | 0.01 | Feb 6, 2009 | SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL commands via the colpick parameter in a singleread action. | |||
| CVE-2006-3832 | 0.03 | — | 0.02 | Jul 25, 2006 | SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||
| CVE-2006-1114 | 0.03 | — | 0.03 | Mar 9, 2006 | Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b)… | |||
| CVE-2006-1113 | 0.03 | — | 0.01 | Mar 9, 2006 | SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter. | |||
| CVE-2006-3820 | 0.00 | — | 0.01 | Jul 25, 2006 | Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter. |
- CVE-2008-0139Jan 8, 2008risk 0.05cvss —epss 0.22
Eval injection vulnerability in loudblog/inc/parse_old.php in Loudblog 0.8.0 and earlier allows remote attackers to execute arbitrary PHP code via the template parameter.
- CVE-2006-0565Feb 6, 2006risk 0.04cvss —epss 0.09
PHP remote file include vulnerability in inc/backend_settings.php in Loudblog 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the $GLOBALS[path] parameter.
- CVE-2008-6077Feb 6, 2009risk 0.03cvss —epss 0.01
SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL commands via the colpick parameter in a singleread action.
- CVE-2006-3832Jul 25, 2006risk 0.03cvss —epss 0.02
SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2006-1114Mar 9, 2006risk 0.03cvss —epss 0.03
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b)…
- CVE-2006-1113Mar 9, 2006risk 0.03cvss —epss 0.01
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVE-2006-3820Jul 25, 2006risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter.