| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-3973 | 6.8 |
Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.
|
15-10-2018 - 21:32 | 25-07-2007 - 17:30 | |
| CVE-2007-3974 | 7.5 |
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
|
15-10-2018 - 21:32 | 25-07-2007 - 17:30 | |
| CVE-2010-4991 | 7.5 |
SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.
|
29-08-2017 - 01:29 | 01-11-2011 - 22:55 | |
| CVE-2017-9355 | 4.3 |
XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.
|
13-08-2017 - 01:29 | 07-06-2017 - 19:29 | |
| CVE-2017-9430 | 7.5 |
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv
|
12-08-2017 - 01:29 | 05-06-2017 - 11:29 | |
| CVE-2017-9413 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a podcast via the add parameter to podcastReceiverAdmi
|
28-07-2017 - 18:02 | 25-07-2017 - 18:29 | |
| CVE-2017-9415 | 5.1 |
Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.
|
25-07-2017 - 18:12 | 21-07-2017 - 14:29 |