Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

60 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2006-0403	Modificada	Alta (7.5)	2.0%	—	E-moblog	25/1/2006	16/6/2026	Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.
CVE-2006-0409	Modificada	Media (4.3)	2.0%	💥 Exploit	Pixelpost Photoblog	25/1/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.
CVE-2006-0312	Modificada	Media (5)	2.9%	💥 Exploit	Mike Helton Aoblogger	19/1/2006	16/6/2026	create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1.
CVE-2006-0310	Modificada	Media (4.3)	2.1%	💥 Exploit	Mike Helton Aoblogger	19/1/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag.
CVE-2006-0311	Modificada	Alta (7.5)	1.9%	💥 Exploit	Mike Helton Aoblogger	19/1/2006	16/6/2026	SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVE-2006-0249	Modificada	Alta (7.5)	1.3%	💥 Exploit	Bitdamaged Geoblog	18/1/2006	16/6/2026	SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable).
CVE-2006-0233	Modificada	Media (4.3)	1.2%	—	Microblog	18/1/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in functions.php in microBlog 2.0 RC-10 allows remote attackers to inject arbitrary web script and HTML via a javascript: URI in a [url] BBcode tag.
CVE-2006-0234	Modificada	Alta (7.5)	1.9%	💥 Exploit	Microblog	18/1/2006	16/6/2026	SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.
CVE-2005-3264	Modificada	Media (4.3)	1.3%	—	Zeroblog	20/10/2005	16/6/2026	Cross-site scripting (XSS) vulnerability in thread.php for Zeroblog 1.1f and 1.2a allows remote attackers to inject arbitrary web script or HTML via the threadID parameter.
CVE-2005-2039	Modificada	Media (5)	1.8%	—	Nanoblogger	19/6/2005	16/6/2026	Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.