Leif M. Wright Web Blog
6 CVEs affecting Leif M. Wright Web Blog. Latest disclosed: 2006-02-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-0846 | | 2006-02-22 | Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Refe… | |
CVE-2006-0845 | | 2006-02-22 | Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configur… | |
CVE-2006-0844 | | 2006-02-22 | Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login… | |
CVE-2006-0843 | | 2006-02-22 | Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read… | |
CVE-2004-2347 | | 2004-12-31 | blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parame… | |
CVE-2004-2127 | | 2004-01-20 | Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable. |