VendorsBlog Projectblogall versions
Vulnerabilities

Blog Project Blog

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2017-14346
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for a .php file.
Published 2017-09-12 · Modified
9.8EPSS 0.021
CVE-2017-14345
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
Published 2017-09-12 · Modified
9.8EPSS 0.011
CVE-2022-23626
Insufficient file checks in m1k1o/blog
Published 2022-02-08 · Modified
8.81 PoCEPSS 0.099