GCVE - cpe:2.3:a:blogcms:blog\:cms:4.2.1.e:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:blogcms:blog\:cms:4.2.1.e:*:*:*:*:*:*:*

part: a version: 4.2.1.e update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4750`	vulnerable	2026-06-08 04:56:30.595527	Details available Cross-site request forgery (CSRF) vulnerability in admin/libs/ADMIN.php in BLOG:CMS 4.2.1.e, and possibly earlier, allows remote attackers to hijack the authentication of administrators. Published: 2011-03-01T21:00:00.000Z Updated: 2024-08-07T03:55:35.008Z Open on db.gcve.eu Reference links http://www.exploit-db.com/exploits/15743 http://blogcms.com/ http://www.htbridge.ch/advisory/xsrf_csrf_in_blogcms.html http://securityreason.com/securityalert/8112 http://packetstormsecurity.org/files/view/96731/blogcms-xsrfxss.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-4749`	vulnerable	2026-06-08 04:56:30.595108	Details available Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1.e, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) body parameter to action.php and the (2) amount and (3) action parameters to admin/index.php. Published: 2011-03-01T21:00:00.000Z Updated: 2024-08-07T03:55:35.023Z Open on db.gcve.eu Reference links http://www.htbridge.ch/advisory/cross_site_scripting_vulnerability_in_blogcms.html http://www.exploit-db.com/exploits/15743 http://www.htbridge.ch/advisory/xss_vulnerability_in_blogcms_1.html http://www.htbridge.ch/advisory/xss_vulnerability_in_blogcms.html http://blogcms.com/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.