Approved changes feed: RSS · Atom

cpe:2.3:a:jblog:jblog:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorJblog (a6d62a20-e24a-5272-aeb7-ee41b1b4614f)
ProductJblog (2099cd32-d69f-535b-a031-f0d61cd6d191)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4919 vulnerable 2026-06-08 04:49:57.467738 Details available
Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php.
Published: 2007-09-17T17:00:00.000Z
Updated: 2024-08-07T15:08:34.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3974 vulnerable 2026-06-08 04:49:55.495522 Details available
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary accounts via modified mot and droit parameters.
Published: 2007-07-25T17:00:00.000Z
Updated: 2024-08-07T14:37:05.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3973 vulnerable 2026-06-08 04:49:55.495059 Details available
Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, or the (2) search parameter or (3) theme cookie to (b) recherche.php.
Published: 2007-07-25T17:00:00.000Z
Updated: 2024-08-07T14:37:05.454Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.