Dootzky Oblog
5 CVEs affecting Dootzky Oblog. Latest disclosed: 2010-06-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-4909 | | 2010-06-25 | admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests. | |
CVE-2009-4908 | | 2010-06-25 | Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the (1) commentName, (2) comment… | |
CVE-2009-4907 | | 2010-06-25 | Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1)… | |
CVE-2009-4904 | | 2010-06-25 | article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service (blog spam) via a comment=new action. | |
CVE-2009-4903 | | 2010-06-25 | Cross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE… |