Vendor/product archive

grayscale / grayscale_blog CVEs

Beta · best-effort

3 CVEs tagged to grayscale / grayscale_blog — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to grayscale vendor archive

CVE-2007-1432

Published Mar 13, 2007

Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests with modified arguments in (1) the user_permissions parameter t…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-1433

Published Mar 13, 2007

Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the comment fie…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2007-1434

Published Mar 13, 2007

SQL injection vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, might allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a)…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1