Approved changes feed: RSS · Atom
cpe:2.3:a:wuzly:wuzly:2.0:*:*:*:*:*:*:*part: a version: 2.0 update: *
| Vendor | Wuzly (48c73125-d874-5c88-9fff-6b0acdbc9cef) |
|---|---|
| Product | Wuzly (9d7777ff-2527-5903-bfea-e31f804bce88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-3839 |
vulnerable | 2026-06-08 04:59:27.960482 |
Details available
The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hbWU cookie.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:46:03.224Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3838 |
vulnerable | 2026-06-08 04:59:27.960196 |
Details available
Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to fp.php, (2) epage parameter to newpage.php, (3) epost parameter to newpost.php, and (4) username parameter to login.php in admin/; or the (5) username parameter to mobile/login.php.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:46:03.186Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3837 |
vulnerable | 2026-06-08 04:59:27.959843 |
Details available
Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the preview parameter to index.php.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:46:03.205Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3836 |
vulnerable | 2026-06-08 04:59:27.959531 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator, (2) perform cross-site scripting (XSS), (3) perform SQL injection, or have other unspecified impact via unknown vectors.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:46:03.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-3835 |
vulnerable | 2026-06-08 04:59:27.959112 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to (1) admin/login.php and (2) admin/404.php; the (3) q parameter to search.php; the (4) theme_name parameter to theme_settings.php, (5) extension_name parameter to extension_settings.php, (6) q parameter to search.php, (7) type parameter to comments.php, sort parameter to (8) pages.php and (9) posts.php, and the (10) type and (11) q parameter to media.php in admin/; the sidebar parameter to (12) add_widget.php and (13) widgets.php, id parameter to (14) category_delete.php, (15) comment.php, (16) page_delete.php, and (17) post_delete.php, (18) type parameter to media.php, and (19) id and (20) sidebar parameter to widget_delete.php in mobile/; and the (21) name, (22) email, (23) website, and (24) comment parameters to index.php; and the (25) username parameter to admin/login.php.
Published: 2011-12-24T19:00:00.000Z
Updated: 2024-08-06T23:46:03.115Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.