GCVE - cpe:2.3:a:archangelmgt:weblog:0.90.02:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:archangelmgt:weblog:0.90.02:*:*:*:*:*:*:*

part: a version: 0.90.02 update: *

Vendor	Archangelmgt (`81d53c1a-582f-5a5d-9c7d-fecf9a9e3b94`)
Product	Weblog (`3ec53421-794e-5c5c-b9e5-000165bda5ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2574`	vulnerable	2026-06-08 04:49:45.291002	Details available Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the index parameter. Published: 2007-05-09T21:00:00.000Z Updated: 2024-08-07T13:42:33.302Z Open on db.gcve.eu Reference links http://osvdb.org/41731 https://www.exploit-db.com/exploits/3859	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4091`	vulnerable	2026-06-08 04:49:10.926254	Details available Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section. Published: 2006-08-11T10:00:00.000Z Updated: 2024-08-07T18:57:45.979Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/442580/100/0/threaded http://securitytracker.com/id?1016670 http://www.securityfocus.com/bid/19432 https://exchange.xforce.ibmcloud.com/vulnerabilities/28287 http://securityreason.com/securityalert/1360	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0945`	vulnerable	2026-06-08 04:48:55.841471	Details available PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter. Published: 2006-03-01T02:00:00.000Z Updated: 2024-08-07T16:56:13.990Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015689 http://www.osvdb.org/23621 http://www.securityfocus.com/bid/16848 https://exchange.xforce.ibmcloud.com/vulnerabilities/25142 http://www.securityfocus.com/archive/1/426184/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0944`	vulnerable	2026-06-08 04:48:55.841068	Details available Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1. Published: 2006-03-01T02:00:00.000Z Updated: 2024-08-07T16:56:14.467Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1015689 https://exchange.xforce.ibmcloud.com/vulnerabilities/24984 http://www.securityfocus.com/bid/16848 http://www.osvdb.org/23620 http://www.securityfocus.com/archive/1/426184/100/0/threaded	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.