Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

katywhitton / blogit! CVEs

Beta · best-effort

4 CVEs tagged to katywhitton / blogit! — 0 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filtersBack to katywhitton vendor archive

CVE-2009-0337

Published Jan 29, 2009

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NOTE: the pr…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort

CVE-2009-0336

Published Jan 29, 2009

Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user…

CVSS 5.0 · Medium
Vendor/product tagsBeta · best-effort

CVE-2009-0335

Published Jan 29, 2009

Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter.

CVSS 4.3 · Medium
Vendor/product tagsBeta · best-effort

CVE-2009-0334

Published Jan 29, 2009

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action.

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-4 of 4 CVEsPage 1 of 1