Approved changes feed: RSS · Atom
cpe:2.3:a:mywebland:mybloggie:2.1.6:*:*:*:*:*:*:*
part: a version: 2.1.6 update: *
| Vendor | Mywebland (827ceaa0-c011-5460-b230-a10d8de75d38) |
|---|---|
| Product | Mybloggie (5eba0923-2a1e-5a94-93ea-029e8896ed07) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3080 |
vulnerable | 2026-06-08 04:50:32.989664 |
Details available
Cross-site request forgery (CSRF) vulnerability in admin.php in myWebland myBloggie 2.1.6 allows remote attackers to perform edit actions as administrators. NOTE: this can be leveraged to execute SQL commands by also exploiting CVE-2007-1899.
Published: 2008-07-09T00:00:00.000Z
Updated: 2024-08-07T09:21:35.076Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3650 |
vulnerable | 2026-06-08 04:49:54.491092 |
Details available
myWebland myBloggie 2.1.6 allow remote attackers to obtain sensitive information via (1) an invalid year parameter to calendar.php, reached through index.php; (2) a direct request to common.php; and (3) a mode array parameter in the query string to login.php, which reveal the installation path in various error messages.
Published: 2008-07-09T00:00:00.000Z
Updated: 2025-04-03T14:47:21.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1899 |
vulnerable | 2026-06-08 04:49:43.800689 |
Details available
Multiple SQL injection vulnerabilities in myWebland myBloggie 2.1.6 allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a viewuser action to index.php, and allow remote authenticated administrators to execute arbitrary SQL commands via (2) the post_id parameter in an edit action to admin.php.
Published: 2008-07-09T00:00:00.000Z
Updated: 2024-08-07T13:13:41.891Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.