GCVE - cpe:2.3:a:toocharger:smartblog:1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:toocharger:smartblog:1.3:*:*:*:*:*:*:*

part: a version: 1.3 update: *

Vendor	Toocharger (`4a7b5dcc-54ab-5f1e-b749-b2f7fd5402b1`)
Product	Smartblog (`da7464e0-3aa3-5977-b33c-b19f743d94f8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2185`	vulnerable	2026-06-08 04:50:23.178382	Details available Directory traversal vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to include arbitrary local files via directory traversal sequences in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-05-13T22:00:00.000Z Updated: 2024-08-07T08:49:58.512Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30057 https://exchange.xforce.ibmcloud.com/vulnerabilities/42192 http://www.securityfocus.com/bid/29043	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2184`	vulnerable	2026-06-08 04:50:23.178079	Details available Multiple SQL injection vulnerabilities in SMartBlog (aka SMBlog) 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) mois, (2) an, (3) jour, and (4) id parameters to index.php, and the (5) login parameter to gestion/logon.php, different vectors than CVE-2008-2183. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2008-05-13T22:00:00.000Z Updated: 2024-08-07T08:49:58.473Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30057 https://exchange.xforce.ibmcloud.com/vulnerabilities/42245 http://www.securityfocus.com/bid/29043 https://exchange.xforce.ibmcloud.com/vulnerabilities/42190	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2183`	vulnerable	2026-06-08 04:50:23.177689	Details available SQL injection vulnerability in index.php in SMartBlog (aka SMBlog) 1.3 allows remote attackers to execute arbitrary SQL commands via the idt parameter. Published: 2008-05-13T22:00:00.000Z Updated: 2024-08-07T08:49:58.582Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30057 http://www.securityfocus.com/bid/29033 https://www.exploit-db.com/exploits/5535 https://exchange.xforce.ibmcloud.com/vulnerabilities/42190	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.