Filtered by vendor Blog Cms Subscriptions
Filtered by product Blog Cms Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-0450 1 Blog Cms 1 Blog Cms 2018-10-15 N/A
Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (1) DIR_PLUGINS parameter to (a) index.php, and the (2) DIR_LIBS parameter to (b) media.php and (c) xmlrpc/server.php in admin/.
CVE-2008-0360 1 Blog Cms 1 Blog Cms 2017-10-19 N/A
Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parameter to index.php, (2) the user parameter to action.php, or (3) the field parameter to admin/plugins/table/index.php.
CVE-2008-0359 1 Blog Cms 1 Blog Cms 2017-10-19 N/A
Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index.php in photo/.