cbcvebase.

Blogengine E2 vulnerabilities

1 known vulnerability affecting blogengine/e2.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2014-4736P3HIGHCVSS 7.5PoC≤ 2.42014-07-24
CVE-2014-4736 [HIGH] CWE-89 CVE-2014-4736: SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process.
nvd
Blogengine E2 vulnerabilities | cvebase