← Back

D2kblog

d2kblog

Vendor: D2ksoft • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1123
1D2ksoft
1D2kblog
Apr 16, 2026
Mar 9, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.
CVE-2006-1122
1D2ksoft
1D2kblog
Apr 16, 2026
Mar 9, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.