WI
Vendor
Wikyblog
1 product with CVEs on record
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2010-0757
WI
Wikyblog
Wikyblog
–
3%
Feb 27Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable…
CVE-2010-0756
WI
Wikyblog
Wikyblog
–
2%
Feb 27Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Comment/Main, (2)…
CVE-2010-0755
WI
Wikyblog
Wikyblog
–
2%
Feb 27PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter
CVE-2010-0754
WI
Wikyblog
Wikyblog
–
2%
Feb 27Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2008-6097
WI
Wikyblog
Wikyblog
–
2%
Feb 9Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key parameter to…
CVE-2007-2781
WI
Wikyblog
Wikyblog
–
1%
May 21Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTML, probably via…
CVE-2006-6466
WI
Wikyblog
Wikyblog
–
1%
Dec 11Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) key, (2)…
CVE-2006-6465
WI
Wikyblog
Wikyblog
–
1%
Dec 11Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences…
CVE-2006-5193
WI
Wikyblog
Wikyblog
–
3%
Oct 10PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir…