WI
Product
Wikyblog
9
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Wikyblog to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0757 | – | Feb 27 | Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable… Affected: 1.7.3 |
| CVE-2010-0756 | – | Feb 27 | Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2)… Affected: 1.7.3 |
| CVE-2010-0755 | – | Feb 27 | PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter Affected: 1.7.3 |
| CVE-2010-0754 | – | Feb 27 | Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the… Affected: 1.7.2; 1.7.3 |
| CVE-2008-6097 | – | Feb 9 | Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to… Affected: through 1.7; 1.2.1; 1.2.2; 1.2.3; 1.3.2; 1.4; +34 more |
| CVE-2007-2781 | – | May 21 | Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTML, probably via… Affected: through 1.4.12 |
| CVE-2006-6466 | – | Dec 11 | Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) key, (2)… Affected: through 1.3.2 |
| CVE-2006-6465 | – | Dec 11 | Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences… Affected: 1.3.2 |
| CVE-2006-5193 | – | Oct 10 | PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir… Affected: through 1.2.3; 1.2.1; 1.2.2 |
Showing 9