Simple Php Blog
Approved changes feed: RSS · Atom
cpe:2.3:a:philipinho:simple-php-blog:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Philipinho (6e930487-307b-5f41-a882-aa72194b2e1e) |
|---|---|
| Product | Simple Php Blog (2a457e57-ce1b-5776-a6df-864aabf94a7b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/philipinho/simple-php-blog |
purl2cpe | 2026-06-01 10:11:30.444083 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15223 |
vulnerable | 2026-06-08 07:06:35.897725 |
Philipinho Simple-PHP-Blog login.php cross site scripting
MEDIUM (4.3)
A vulnerability was found in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. Impacted is an unknown function of the file /login.php. Performing manipulation of the argument Username results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure and makes clear that the product is "[f]or educational purposes only".
Published: 2025-12-31T02:32:09.788Z
Updated: 2026-01-02T14:37:44.183Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-14227 |
vulnerable | 2026-06-08 07:06:33.911948 |
Philipinho Simple-PHP-Blog edit.php sql injection
MEDIUM (6.3)
A security flaw has been discovered in Philipinho Simple-PHP-Blog up to 94b5d3e57308bce5dfbc44c3edafa9811893d958. This issue affects some unknown processing of the file /edit.php. The manipulation results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-12-08T10:02:06.837Z
Updated: 2025-12-08T17:16:47.126Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.