Vendor archive

webblizzard CVEs

Beta · best-effort

3 CVEs tagged to vendor webblizzard — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2008-3154

Published Jul 11, 2008

SQL injection vulnerability in index.php in WebBlizzard CMS allows remote attackers to execute arbitrary SQL commands via the page parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-1949

Published Apr 11, 2007

Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2007-1950

Published Apr 11, 2007

Cross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote attackers to inject arbitrary web script or HTML via the Suchzeile parameter.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1