GCVE - cpe:2.3:a:drumster:blogme:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:drumster:blogme:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

Vendor	Drumster (`3eed6afc-fbff-57bb-84df-31bbdba2127d`)
Product	Blogme (`164a2d30-d9dd-5b36-a27e-115490221fc5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2661`	vulnerable	2026-06-08 04:49:45.707506	Details available SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976. Published: 2007-05-14T23:00:00.000Z Updated: 2024-08-07T13:49:56.891Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/23956 http://secunia.com/advisories/25229 http://www.vupen.com/english/advisories/2007/1784 http://osvdb.org/36008 https://exchange.xforce.ibmcloud.com/vulnerabilities/34253	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5976`	vulnerable	2026-06-08 04:49:21.746112	Details available Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: some of these details are obtained from third party information. Published: 2006-11-20T21:00:00.000Z Updated: 2024-08-07T20:12:31.050Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1882 http://secunia.com/advisories/22902 https://www.exploit-db.com/exploits/2781 http://www.securityfocus.com/archive/1/451563/100/0/threaded http://www.securityfocus.com/bid/21071	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5975`	vulnerable	2026-06-08 04:49:21.745689	Details available Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field. Published: 2006-11-20T21:00:00.000Z Updated: 2024-08-07T20:12:31.252Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/1882 http://secunia.com/advisories/22902 https://www.exploit-db.com/exploits/2781 http://www.securityfocus.com/archive/1/451563/100/0/threaded http://www.securityfocus.com/bid/21071	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Blogme

Notes

PURL mappings

Vulnerability references

Contribute