Approved changes feed: RSS · Atom
cpe:2.3:a:mywebland:mybloggie:2.1.3_beta:*:*:*:*:*:*:*
part: a version: 2.1.3_beta update: *
| Vendor | Mywebland (827ceaa0-c011-5460-b230-a10d8de75d38) |
|---|---|
| Product | Mybloggie (5eba0923-2a1e-5a94-93ea-029e8896ed07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-4043 |
vulnerable | 2026-06-08 04:49:10.850658 |
Details available
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.
Published: 2006-08-09T23:00:00.000Z
Updated: 2024-08-07T18:57:45.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3905 |
vulnerable | 2026-06-08 04:49:10.427526 |
Details available
SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.346Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3903 |
vulnerable | 2026-06-08 04:49:10.424776 |
Details available
CRLF injection vulnerability in (1) index.php and (2) admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting (XSS) attacks via a cookie.
Published: 2006-07-27T22:00:00.000Z
Updated: 2024-08-07T18:48:39.407Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2269 |
vulnerable | 2026-06-08 04:49:06.189125 |
Details available
Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.
Published: 2006-05-09T10:00:00.000Z
Updated: 2024-08-07T17:43:29.026Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1205 |
vulnerable | 2026-06-08 04:48:56.517580 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.
Published: 2006-03-14T01:00:00.000Z
Updated: 2024-08-07T17:03:28.523Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-4225 |
vulnerable | 2026-06-08 04:48:43.281021 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3153 |
vulnerable | 2026-06-08 04:48:39.733920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2838 |
vulnerable | 2026-06-08 04:48:30.672661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.