Y-Blog Yblog vulnerabilities
2 known vulnerabilities affecting y-blog/yblog.
Total CVEs
2
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2008-2669P3HIGHCVSS 7.5PoCv0.2.2.22008-06-12
CVE-2008-2669 [HIGH] CWE-89 CVE-2008-2669: Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary
Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.
nvd
CVE-2008-2668P4MEDIUMCVSS 4.3PoCv0.2.2.22008-06-12
CVE-2008-2668 [MEDIUM] CWE-79 CVE-2008-2668: Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to injec
Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.
nvd