Approved changes feed: RSS · Atom

cpe:2.3:a:dayfox_designs:dayfox_blog:4:*:*:*:*:*:*:*

part: a version: 4 update: *

VendorDayfox Designs (427d756c-520e-5a8d-a64a-2d811cadc3f3)
ProductDayfox Blog (daf0e691-2890-5477-a58f-f8167b57daa6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3564 vulnerable 2026-06-08 04:50:35.323343 Details available
Multiple directory traversal vulnerabilities in index.php in Dayfox Blog 4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) p, (2) cat, and (3) archive parameters. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Published: 2008-08-10T20:00:00.000Z
Updated: 2024-08-07T09:45:18.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1525 vulnerable 2026-06-08 04:49:42.802952 Details available
Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute arbitrary PHP code via the cat parameter, which can be executed via a request to posts.php.
Published: 2007-03-20T20:00:00.000Z
Updated: 2024-08-07T12:59:08.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0150 vulnerable 2026-06-08 04:49:31.547972 Details available
Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.
Published: 2007-01-09T18:00:00.000Z
Updated: 2024-08-07T12:03:37.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.