Approved changes feed: RSS · Atom
cpe:2.3:a:mywebland:mybloggie:2.1.2:*:*:*:*:*:*:*
part: a version: 2.1.2 update: *
| Vendor | Mywebland (827ceaa0-c011-5460-b230-a10d8de75d38) |
|---|---|
| Product | Mybloggie (5eba0923-2a1e-5a94-93ea-029e8896ed07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-4043 |
vulnerable | 2026-06-08 04:49:10.850613 |
Details available
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.
Published: 2006-08-09T23:00:00.000Z
Updated: 2024-08-07T18:57:45.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2269 |
vulnerable | 2026-06-08 04:49:06.188068 |
Details available
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.
Published: 2006-05-09T10:00:00.000Z
Updated: 2024-08-07T17:43:29.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1205 |
vulnerable | 2026-06-08 04:48:56.516032 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.
Published: 2006-03-14T01:00:00.000Z
Updated: 2024-08-07T17:03:28.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2838 |
vulnerable | 2026-06-08 04:48:30.671351 |
Details available
SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Published: 2005-09-07T04:00:00.000Z
Updated: 2024-08-07T22:45:02.351Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1499 |
vulnerable | 2026-06-08 04:48:26.792699 |
Details available
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the comment_id parameter.
Published: 2005-05-11T04:00:00.000Z
Updated: 2024-08-07T21:51:50.241Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1498 |
vulnerable | 2026-06-08 04:48:26.792286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.