GCVE - cpe:2.3:a:code-projects:easy_blog_site:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:easy_blog_site:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Code Projects (`a64d3912-7513-5560-97cf-6216c4da48a5`)
Product	Easy Blog Site (`07c3db1b-0dd4-5e04-8cb1-83b8bbf69325`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6202`	vulnerable	2026-06-08 08:07:04.544272	code-projects Easy Blog Site post.php sql injection MEDIUM (6.3) A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file post.php. Performing a manipulation of the argument tags results in sql injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. Published: 2026-04-13T19:15:19.523Z Updated: 2026-04-13T20:49:14.823Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/357124 https://vuldb.com/vuln/357124/cti https://vuldb.com/submit/797629 https://github.com/Learner636/CVE-smbmit/issues/6 https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5806`	vulnerable	2026-06-08 08:07:04.116996	code-projects Easy Blog Site update.php cross site scripting LOW (3.5) A security vulnerability has been detected in code-projects Easy Blog Site 1.0. This affects an unknown function of the file /posts/update.php. The manipulation of the argument postTitle leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Published: 2026-04-08T21:15:17.524Z Updated: 2026-04-09T19:40:42.658Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356244 https://vuldb.com/vuln/356244/cti https://vuldb.com/submit/787045 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Easy%20Blog%20Site%20PHP%20postTitle%20Parameter.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5805`	vulnerable	2026-06-08 08:07:04.116558	code-projects Easy Blog Site contact_us.php sql injection HIGH (7.3) A weakness has been identified in code-projects Easy Blog Site up to 1.0. The impacted element is an unknown function of the file /users/contact_us.php. Executing a manipulation of the argument Name can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Published: 2026-04-08T20:30:18.416Z Updated: 2026-04-09T16:17:06.443Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/356243 https://vuldb.com/vuln/356243/cti https://vuldb.com/submit/787031 https://github.com/ahmadmarz10-hub/CVEsMarz/blob/main/SQL%20Injection%20in%20Easy%20Blog%20Site%20PHP%20name%20Parameter.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-5646`	vulnerable	2026-06-08 08:07:03.942683	code-projects Easy Blog Site login.php sql injection HIGH (7.3) A security vulnerability has been detected in code-projects Easy Blog Site 1.0. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Published: 2026-04-06T10:30:11.911Z Updated: 2026-04-06T14:49:16.786Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/355434 https://vuldb.com/vuln/355434/cti https://vuldb.com/submit/786150 https://github.com/MyMySSS/cve/blob/main/cve.md https://code-projects.org/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.