Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2623▼ 224 respecto a la semana anterior

Críticas / altas1384▲ 157 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)56▼ 472 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2012-5186	Modificada	Media (4.3)	1.2%	—	Fleugel Myu-s Fleugel PHP Weblog System Mania	6/2/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in FLUGELz netmania myu-s and PHP WeblogSystem allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-0458	Modificada	Alta (7.5)	1.00%	—	Netartmedia Blog System	28/1/2010	16/6/2026	Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.
CVE-2009-3594	Modificada	Media (4.3)	1.0%	—	Blob Blog System	8/10/2009	16/6/2026	Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject arbitrary web script or HTML via the postid parameter.
CVE-2008-5733	Modificada	Alta (7.5)	1.00%	—	Php-fusion Team Impact TI Blog System Module	26/12/2008	16/6/2026	SQL injection vulnerability in blog.php in the Team Impact TI Blog System mod for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-5311	Modificada	Alta (7.5)	1.0%	—	Netart Media Blog System	2/12/2008	16/6/2026	SQL injection vulnerability in image.php in NetArt Media Blog System 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-0424	Modificada	Alta (7.5)	0.97%	—	Mooseguy Blog System Mgbs	23/1/2008	16/6/2026	SQL injection vulnerability in blog.php in Mooseguy Blog System (MGBS) 1.0 allows remote attackers to execute arbitrary SQL commands via the month parameter.
CVE-2007-3979	Modificada	Media (6.8)	1.1%	—	Netart Media Blog System	25/7/2007	16/6/2026	SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVE-2005-4049	Modificada	Alta (7.5)	2.3%	—	Netart Media Blog System	7/12/2005	16/6/2026	Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.