RSS   Podatności dla 'Pluggedout blog'   RSS

2006-02-06
 
CVE-2006-0563

CWE-Other
 
 
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.

 
 
CVE-2006-0562

CWE-Other
 
 
Cross-site scripting (XSS) vulnerability in problem.php in PluggedOut Blog 1.9.9c allows remote attackers to inject arbitrary web script or HTML via the data parameter.

 
2005-12-07
 
CVE-2005-4054

 
 
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (5) day parameter.

 

Copyright 2024, cxsecurity.com

 

Back to Top