GCVE - cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:myblog:myblog:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Myblog (`c872eea1-f5b7-5fd0-b1c5-50c4bf4a5308`)
Product	Myblog (`e7b143b2-2c6e-5d81-9533-f43afa8bb601`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6193`	vulnerable	2026-06-08 04:50:54.449761	Details available Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information. Published: 2009-02-19T18:00:00.000Z Updated: 2024-08-07T11:20:25.525Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5913 https://exchange.xforce.ibmcloud.com/vulnerabilities/48843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4341`	vulnerable	2026-06-08 04:50:38.684515	Details available add.php in MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication and gain administrative access by setting a cookie with admin=yes and login=admin. Published: 2008-09-30T17:00:00.000Z Updated: 2024-08-07T10:08:35.320Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2008/2654 http://www.securityfocus.com/bid/31311 https://exchange.xforce.ibmcloud.com/vulnerabilities/45576 https://www.exploit-db.com/exploits/6531	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2963`	vulnerable	2026-06-08 04:50:32.741707	Details available Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php. Published: 2008-07-02T17:00:00.000Z Updated: 2024-08-07T09:21:35.062Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/29900 https://www.exploit-db.com/exploits/5913 https://exchange.xforce.ibmcloud.com/vulnerabilities/43292	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2962`	vulnerable	2026-06-08 04:50:32.741343	Details available Multiple cross-site scripting (XSS) vulnerabilities in MyBlog allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) sort parameters to index.php, and the (3) id parameter to post.php. Published: 2008-07-02T17:00:00.000Z Updated: 2024-08-07T09:21:34.539Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/29900 https://exchange.xforce.ibmcloud.com/vulnerabilities/43293 https://www.exploit-db.com/exploits/5913	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2082`	vulnerable	2026-06-08 04:49:44.128094	Details available Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php. NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers. Published: 2007-04-18T02:20:00.000Z Updated: 2024-08-07T13:23:50.380Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/465873/100/0/threaded http://osvdb.org/35392 http://securityreason.com/securityalert/2581 https://exchange.xforce.ibmcloud.com/vulnerabilities/33707	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2081`	vulnerable	2026-06-08 04:49:44.127711	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.