Export limit exceeded: 425959 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2006-0233

Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Microblog
Products
Microblog
CVE-2006-0234

SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.

CVSS 2.0 · 7.5 High EPSS 1.9% KEV · Not listed
Vendors
Microblog
Products
Microblog
CVE-2011-3756

MicroBlog 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by init.php and certain other files.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Microblog
Products
Microblog