Filtered by vendor Abweb Subscriptions
Filtered by product Minimal-ablog Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-6613 1 Abweb 1 Minimal-ablog 2017-09-29 N/A
uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.
CVE-2008-6612 1 Abweb 1 Minimal-ablog 2017-09-29 N/A
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/.