← Back

Abweb

abweb

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Minimal Ablog
minimal-ablog

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Abweb
1Minimal Ablog
Apr 23, 2026
Apr 6, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
uploader.php in minimal-ablog 0.4 does not properly restrict access, which allows remote attackers to gain administrative privileges via a direct request.
1Abweb
1Minimal Ablog
Apr 23, 2026
Apr 6, 2009
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request...Show more
Unrestricted file upload vulnerability in admin/uploader.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in img/.Show less
1Abweb
1Minimal Ablog
Apr 23, 2026
Apr 6, 2009
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in index.php in Minimal ABlog 0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.