Mike Helton Aoblogger
3 CVEs affecting Mike Helton Aoblogger. Latest disclosed: 2006-01-19. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-0312 | | 2006-01-19 | create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1. | |
CVE-2006-0311 | | 2006-01-19 | SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. | |
CVE-2006-0310 | | 2006-01-19 | Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag. |