Battleblog

battleblog

4 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-1609 1Battleblog 1Battle Blog Apr 23, 2026 May 11, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct reques...Show more Unrestricted file upload vulnerability in admin/uploadform.asp in Battle Blog 1.25 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file.Show less
CVE-2008-2685 1Battleblog 1Battleblog Apr 23, 2026 Jun 12, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.
CVE-2008-2626 1Battleblog 1Battleblog Apr 23, 2026 Jun 10, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter.
CVE-2007-0078 1Battleblog 1Battleblog Apr 23, 2026 Jan 5, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/blankmaster.mdb.