Vulnerabilities (CVE)

Filtered by vendor Mafia Moblog Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-2978 1 Mafia Moblog 1 Mafia Moblog 2024-02-28 5.0 MEDIUM N/A
Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.php and (2) upgrade.php.
CVE-2006-2977 1 Mafia Moblog 1 Mafia Moblog 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter.