← Back

Archangelmgt

archangelmgt

5 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Weblog
weblog
4 CVEs
Archangel Weblog
archangel_weblog
1 CVE

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-2356
1Archangelmgt
1Archangel Weblog
Apr 23, 2026
May 20, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the post_id parameter.
CVE-2007-2574
1Archangelmgt
1Weblog
Apr 23, 2026
May 9, 2007
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the index parameter.
CVE-2006-4091
1Archangelmgt
1Weblog
Apr 16, 2026
Aug 11, 2006
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section.
CVE-2006-0945
1Archangelmgt
1Weblog
Apr 16, 2026
Mar 1, 2006
N/A· v4
N/A· v3
6.5 MEDIUM· v2
PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.
CVE-2006-0944
1Archangelmgt
1Weblog
Apr 16, 2026
Mar 1, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.