CoreCVE

CVE Browser

Today· Oct 7th 264Last 7 days 3,313CISA KEV 1,734Critical 42,674 All stats
More filters (active)

Page 1

Vendor: Blogphp Remove filter Clear all
CVE-2008-6745 HIGH

index.php in BlogPHP 2.0 allows remote attackers to gain administrator privileges via a crafted email parameter in a register2 action.

CVSS 7.5 EPSS 5.94% Apr 23, 2009
CVE-2008-6631 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BlogPHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) user…

CVSS 4.3 EPSS 1.72% Apr 7, 2009
CVE-2008-2524 MEDIUM

BlogPHP 2.0 allows remote attackers to bypass authentication, and post (1) messages or (2) comments as an arbitrary user, via a modified blogphp_username field…

CVSS 5.0 EPSS 1.29% Jun 3, 2008
CVE-2008-0679 MEDIUM

Cross-site scripting (XSS) vulnerability in index.php in BlogPHP 2.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

CVSS 4.3 EPSS 1.51% Feb 12, 2008
CVE-2008-0678 MEDIUM

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.

CVSS 6.8 EPSS 0.94% Feb 12, 2008

Showing 1 to 5 CVEs · page 1