GCVE - cpe:2.3:a:perlblog:perlblog:1.09b:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:perlblog:perlblog:1.09b:*:*:*:*:*:*:*

part: a version: 1.09b update: *

Vendor	Perlblog (`f78d315c-751e-5b45-aa56-a0b0ecb9138b`)
Product	Perlblog (`aa281766-53ec-5c1c-9047-650d147c76bb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/mirrete/perlblog`	purl2cpe	2026-06-01 10:15:27.920359

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0782`	vulnerable	2026-06-08 04:48:55.279611	Details available Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter. Published: 2006-02-19T11:00:00.000Z Updated: 2024-08-07T16:48:56.078Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/426260/100/0/threaded http://evuln.com/vulns/81/summary.html http://securityreason.com/securityalert/508 https://exchange.xforce.ibmcloud.com/vulnerabilities/24692 http://secunia.com/advisories/18924	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0781`	vulnerable	2026-06-08 04:48:55.279180	Details available Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain files via the month parameter. Published: 2006-02-19T11:00:00.000Z Updated: 2024-08-07T16:48:55.766Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/24690 http://www.securityfocus.com/archive/1/426260/100/0/threaded http://evuln.com/vulns/81/summary.html http://securityreason.com/securityalert/508 http://secunia.com/advisories/18924	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0780`	vulnerable	2026-06-08 04:48:55.278659	Details available Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters. Published: 2006-02-19T11:00:00.000Z Updated: 2024-08-07T16:48:56.141Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/24691 http://www.securityfocus.com/archive/1/426260/100/0/threaded http://evuln.com/vulns/81/summary.html http://securityreason.com/securityalert/508 http://secunia.com/advisories/18924	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Perlblog

Notes

PURL mappings

Vulnerability references

Contribute