Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:responsive_blog_site:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductResponsive Blog Site (c00a3f35-b466-51d1-84c0-9f57f50684b3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9929 vulnerable 2026-06-08 07:47:10.294109 code-projects Responsive Blog Site blogs_view.php cross site scripting
LOW (2.4)
A weakness has been identified in code-projects Responsive Blog Site 1.0. This affects an unknown function of the file blogs_view.php. Executing manipulation of the argument product_code/gen_name/product_name/supplier can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-09-03T21:32:07.017Z
Updated: 2025-09-04T15:42:27.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7167 vulnerable 2026-06-08 07:43:18.082046 code-projects Responsive Blog Site category.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T07:02:06.019Z
Updated: 2025-07-08T14:12:29.717Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7166 vulnerable 2026-06-08 07:43:18.081458 code-projects Responsive Blog Site single.php sql injection
MEDIUM (6.3)
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-08T06:32:05.665Z
Updated: 2025-07-08T13:43:00.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.