Mzbservices Max.blog
2 CVEs affecting Mzbservices Max.blog. Latest disclosed: 2009-02-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-0409 | | 2009-02-03 | SQL injection vulnerability in offline_auth.php in Max.Blog 1.0.6 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary… | |
CVE-2009-0383 | | 2009-02-02 | delete.php in Max.Blog 1.0.6 does not properly restrict access, which allows remote attackers to delete arbitrary blog posts via a direct request. |