dootzky

Top products

The 5 most recently published vulnerabilities affecting dootzky.

• CVE-2009-4903Cross-site scripting (XSS) vulnerability in index.php in oBlog allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is ...4.3Jun 25, 2010
• CVE-2009-4909admin/index.php in oBlog allows remote attackers to conduct brute-force password guessing attacks via HTTP requests.6.8Jun 25, 2010
• CVE-2009-4904article.php in oBlog does not properly restrict comments, which allows remote attackers to cause a denial of service (blog spam) via a comment=new action.5.0Jun 25, 2010
• CVE-2009-4908Multiple cross-site scripting (XSS) vulnerabilities in oBlog allow remote attackers to inject arbitrary web script or HTML via the (1) commentName, (2) commentEmail, (3) commentWeb, or (4) commentT...4.3Jun 25, 2010
• CVE-2009-4907Multiple cross-site request forgery (CSRF) vulnerabilities in oBlog allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) force ...6.8Jun 25, 2010