VendorsGorani Network6alblogall versions
Vulnerabilities

Gorani Network 6alblog

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2007-3449
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
Published 2007-06-27 · Modified
6.81 PoCEPSS 0.011
CVE-2007-3450
SQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary SQL commands via the member parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2007-06-27 · Modified
6.81 PoCEPSS 0.008
CVE-2007-3451
PHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated administrators to execute arbitrary PHP code via a URL in the pg parameter.
Published 2007-06-27 · Modified
6.51 PoCEPSS 0.028