| Max CVSS | 7.5 | Min CVSS | 6.8 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-6612 | 6.8 |
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/.
|
29-09-2017 - 01:33 | 06-04-2009 - 16:30 | |
| CVE-2008-6613 | 7.5 |
uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.
|
29-09-2017 - 01:33 | 06-04-2009 - 16:30 | |
| CVE-2008-6611 | 7.5 |
SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-09-2017 - 01:33 | 06-04-2009 - 16:30 |