Vulnerabilities (CVE)

Filtered by vendor Aspindir Subscribe
Filtered by product Xweblog
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-4856 1 Aspindir 1 Xweblog 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.
CVE-2010-4855 1 Aspindir 1 Xweblog 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
CVE-2006-5023 1 Aspindir 1 Xweblog 2023-12-10 7.5 HIGH N/A
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori parameter.