CVE-2006-6046
Published Nov 22, 2006Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) edit parameter to (a) admin/articles…
Vendor/product archive
epic_designs / eggblog CVEs
Beta · best-effort7 CVEs tagged to epic_designs / eggblog — 0 Critical, 3 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2006-2725
Published Jun 1, 2006SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2006-2727
Published Jun 1, 2006home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter.
CVE-2006-0349
Published Jan 21, 2006SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to blog.php.
CVE-2006-0350
Published Jan 21, 2006Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script or HTML via the message field to topic.php.
CVE-2005-4546
Published Dec 28, 2005search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used by the Keyword and Search fields, possibly due to an SQL injection vu…
CVE-2005-4547
Published Dec 28, 2005Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the q parameter, as used by the Keyword an…
Showing 1-7 of 7 CVEsPage 1 of 1