Vulnerability index

Browse CVEs

12 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Simplog MEDIUM 6.8
CVE-2009-4092EPSS 5%

Cross-site request forgery (CSRF) vulnerability in user.php in Simplog 0.9.3.2, and possibly earlier, allows remote attackers to hijack the authentic…

No fix yet
Fix from $1,600 2009-11-29
Simplog MEDIUM 5.0
CVE-2009-4091EPSS 7%

comments.php in Simplog 0.9.3.2, and possibly earlier, does not properly restrict access, which allows remote attackers to edit or delete comments vi…

No fix yet
Fix from $1,600 2009-11-29
Simplog HIGH 7.5
CVE-2006-5398

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

No fix yet
Fix from $1,950 2006-10-18
Simplog MEDIUM 6.8
CVE-2006-4058

Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML v…

Fix: after 0.9.3
Fix from $1,600 2006-08-10
Simplog MEDIUM 6.4
CVE-2006-2029

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the …

Fix: after 0.9.3
Fix from $1,600 2006-04-26
Simplog MEDIUM 5.8
CVE-2006-2028

Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary we…

Fix: after 0.9.3
Fix from $1,600 2006-04-26
Simplog HIGH 7.5
CVE-2006-1776EPSS 13%

PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PH…

Fix: after 0.9.2
Fix from $1,950 2006-04-13
Simplog HIGH 7.5
CVE-2006-1777EPSS 10%

Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitr…

Fix: after 0.9.2
Fix from $1,950 2006-04-13
Simplog HIGH 7.5
CVE-2006-1778

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the …

Fix: after 0.9.2
Fix from $1,950 2006-04-13
Simplog MEDIUM 6.8
CVE-2006-1779EPSS 6%

Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web sc…

Fix: after 0.9.2
Fix from $1,600 2006-04-13
Simplog MEDIUM 6.4
CVE-2006-1073

Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files …

Fix: after 1.0.2
Fix from $1,600 2006-03-08
Simplog HIGH 7.5
CVE-2005-3076

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, …

Mitigation only
Fix from $1,950 2005-09-27