Wikyblog

9 CVEs in 1 Wikyblog product, including Wikyblog. Newest: CVE-2010-0757 (2010-02-27). Severity, EPSS and public exploits for each.

Wikyblog products with known CVEs

ProductCVEs
Wikyblog9
Wikyblog CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2010-07572010-02-27Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code by uploading a file…
CVE-2010-07562010-02-27Session fixation vulnerability in WikyBlog 1.7.3 rc2 allows remote attackers to hijack web sessions by setting the jsessionid parameter to (1) index.php/Commen…
CVE-2010-07552010-02-27PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langF…
CVE-2010-07542010-02-27Cross-site scripting (XSS) vulnerability in index.php/Special/Main/Templates in WikyBlog 1.7.2 and 1.7.3 rc2 allows remote attackers to inject arbitrary web sc…
CVE-2008-60972009-02-09Multiple cross-site scripting (XSS) vulnerabilities in WikyBlog before 1.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) key para…
CVE-2007-27812007-05-21Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attackers to inject arbitrary web script or HTM…
CVE-2006-64662006-12-11Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML vi…
CVE-2006-64652006-12-11Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory…
CVE-2006-51932006-10-10PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL…