GCVE - cpe:2.3:a:dootzky:oblog:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dootzky:oblog:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dootzky (`e6bbbca8-fcf4-592e-bf04-8c0d56b5721c`)
Product	Oblog (`4e55828a-88c8-593b-a9de-d421c0c7172d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-4909`	vulnerable	2026-06-08 04:51:50.451213	Details available admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests. Published: 2010-06-25T19:00:00.000Z Updated: 2024-08-07T07:24:52.606Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/59824	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4908`	vulnerable	2026-06-08 04:51:50.450905	Details available Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the (1) commentName, (2) commentEmail, (3) commentWeb, or (4) commentText parameter to article.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (5) article_id or (6) title parameter to admin/write.php, the (7) category_id or (8) category_name parameter to admin/groups.php, the (9) blogroll_id or (10) title parameter to admin/blogroll.php, or the (11) blog_name or (12) tag_line parameter to admin/settings.php. Published: 2010-06-25T19:00:00.000Z Updated: 2024-08-07T07:24:52.607Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37661 https://exchange.xforce.ibmcloud.com/vulnerabilities/54713 http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt http://osvdb.org/60906	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4907`	vulnerable	2026-06-08 04:51:50.450578	Details available Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force an admin logout, (3) change the visibility of posts, (4) remove links, and (5) change the name fields of a blog. Published: 2010-06-25T19:00:00.000Z Updated: 2024-08-07T07:24:52.624Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37661 http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/54714 http://osvdb.org/60907	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4904`	vulnerable	2026-06-08 04:51:50.447394	Details available article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service (blog spam) via a comment=new action. Published: 2010-06-25T19:00:00.000Z Updated: 2024-08-07T07:24:52.675Z Open on db.gcve.eu Reference links http://packetstormsecurity.org/0912-exploits/oblog-xssxsrf.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/59825	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4903`	vulnerable	2026-06-08 04:51:50.446986	Details available Cross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2010-06-25T19:00:00.000Z Updated: 2024-08-07T07:24:52.712Z Open on db.gcve.eu Reference links http://secunia.com/advisories/37661 https://exchange.xforce.ibmcloud.com/vulnerabilities/54712 http://www.osvdb.org/60905	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Oblog

Notes

PURL mappings

Vulnerability references

Contribute