PatchTheCVEsblog vulnerabilities and fixes
Recent CVEs affecting sblog, with upgrade or downgrade steps. 6 tracked.
sblog has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-11-05. Highest priority: CVE-2006-2189 (score 61/100).
- CVE-2007-5818 HIGH 7.6 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in blocks_edit_do.php in sBlog 0.7.3 Beta allows remote attack
- CVE-2007-4102 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject
- CVE-2007-1801 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and e
- CVE-2006-2189 HIGH 10.0 DOWNGRADE SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary
- CVE-2006-1135 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary
- CVE-2006-0101 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote atta
FAQ
How do I fix sblog vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sblog being exploited right now?
None of the tracked sblog CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sblog CVE should I patch first?
CVE-2006-2189 currently ranks highest (61/100): SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary .