GCVE - cpe:2.3:a:qdblog:qdblog:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qdblog:qdblog:*:*:*:*:*:*:*:*

part: a version: * update: *

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/quadzal/qd-blog`	purl2cpe	2026-06-01 10:13:01.052946

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2305`	vulnerable	2026-06-08 04:49:44.622740	Details available Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters. Published: 2007-04-26T21:00:00.000Z Updated: 2024-08-07T13:33:28.327Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/33631 http://www.vupen.com/english/advisories/2007/1387 https://www.exploit-db.com/exploits/3729 http://www.securityfocus.com/bid/23485 http://osvdb.org/35746	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2304`	vulnerable	2026-06-08 04:49:44.622342	Details available Multiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter to categories.php and other unspecified files. Published: 2007-04-26T21:00:00.000Z Updated: 2024-08-07T13:33:28.276Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/33634 http://www.vupen.com/english/advisories/2007/1387 https://www.exploit-db.com/exploits/3729 http://www.securityfocus.com/bid/23485 http://www.attrition.org/pipermail/vim/2007-April/001544.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.