PatchTheCVEeggblog vulnerabilities and fixes
Recent CVEs affecting eggblog, with upgrade or downgrade steps. 12 tracked.
eggblog has 12 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2011-09-23. Highest priority: CVE-2006-2727 (score 51/100).
- CVE-2011-3732 MEDIUM 5.0 DOWNGRADE eggBlog 4.1.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, whi
- CVE-2008-1626 HIGH 7.5 UPGRADE SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands
- CVE-2008-0159 MEDIUM 6.8 UPGRADE SQL injection vulnerability in index.php in eggBlog 3.1.0 and earlier allows remote attackers to execute arbit
- CVE-2007-5980 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to in
- CVE-2007-2978 MEDIUM 6.8 UPGRADE Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by
- CVE-2006-6046 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrar
- CVE-2006-2727 HIGH 7.5 UPGRADE home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and p
- CVE-2006-2725 MEDIUM 6.4 UPGRADE SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitra
- CVE-2006-0350 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in eggblog 2.0 allow remote attackers to inject arbitrary web script
- CVE-2006-0349 HIGH 7.5 DOWNGRADE SQL injection vulnerability in eggblog 2.0 allows remote attackers to execute arbitrary SQL commands via the i
- CVE-2005-4547 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in home/search.php in eggblog 2.0 allows remote attackers to execute
- CVE-2005-4546 HIGH 7.8 UPGRADE search.php in eggblog 2.0 allows remote attackers to obtain the full path via an invalid q parameter, as used
FAQ
How do I fix eggblog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eggblog being exploited right now?
None of the tracked eggblog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eggblog CVE should I patch first?
CVE-2006-2727 currently ranks highest (51/100): home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and p.