GCVE - cpe:2.3:a:blogator-script:blogator-script:0.95:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:blogator-script:blogator-script:0.95:*:*:*:*:*:*:*

part: a version: 0.95 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-6473`	vulnerable	2026-06-08 04:50:55.144204	Details available _blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified "a" parameter with a "%" wildcard symbol in the b parameter. Published: 2009-03-16T16:00:00.000Z Updated: 2024-08-07T11:34:46.701Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/5370 http://www.securityfocus.com/archive/1/490501/100/0/threaded http://osvdb.org/51227	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1760`	vulnerable	2026-06-08 04:50:21.737961	Details available Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include. Published: 2008-04-12T20:00:00.000Z Updated: 2024-08-07T08:32:01.350Z Open on db.gcve.eu Reference links http://secunia.com/advisories/29684 http://www.securityfocus.com/bid/28627 https://exchange.xforce.ibmcloud.com/vulnerabilities/41660 http://www.blogator-script.com/changelog.php https://www.exploit-db.com/exploits/5365	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.