Alexander Palmo

12 CVEs across 1 Alexander Palmo products. Browse Alexander Palmo vulnerabilities, severities, and proof-of-concept exploits.

Alexander Palmo products with known CVEs

ProductCVEs
Simple PHP Blog12
Alexander Palmo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2011-50292011-12-29Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML…
CVE-2009-44212009-12-24Directory traversal vulnerability in languages_cgi.php in Simple PHP Blog 0.5.1 and earlier allows remote authenticated users to include and execute arbitrary…
CVE-2007-50722007-09-24Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inj…
CVE-2007-50712007-09-24Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files and execute arbitrar…
CVE-2006-12432006-03-15Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local…
CVE-2005-34732005-11-03Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the…
CVE-2005-27872005-09-02comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.
CVE-2005-27332005-08-30upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote attackers to execute ar…
CVE-2005-21922005-07-11SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a bru…
CVE-2005-11372005-05-02Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathnam…
CVE-2005-11352005-05-02Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2005-02142005-05-02Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entr…