← Back

Lightblog

lightblog

Vendor: Lightblog • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-0632
1Lightblog
1Lightblog
Apr 23, 2026
Feb 6, 2008
N/A· v4
N/A· v3
9.3 HIGH· v2
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to...Show more
Unrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog's root directory.Show less
CVE-2007-5374
1Lightblog
1Lightblog
Apr 23, 2026
Oct 11, 2007
N/A· v4
N/A· v3
6.5 MEDIUM· v2
cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote authenticated users to increase the privileges of any account.