← Back

D2ksoft

d2ksoft

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
D2kblog
d2kblog
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-1123
1D2ksoft
1D2kblog
Apr 16, 2026
Mar 9, 2006
N/A· v4
N/A· v3
10.0 HIGH· v2
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.
CVE-2006-1122
1D2ksoft
1D2kblog
Apr 16, 2026
Mar 9, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.