RSS   Vulnerabilities for 'Ri blog'   RSS

2007-01-08
 
CVE-2007-0121

CWE-Other
 

 
Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter.

 
2006-04-25
 
CVE-2006-2004

CWE-Other
 

 
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.

 


Copyright 2024, cxsecurity.com

 

Back to Top