katywhitton

Top products

The 8 most recently published vulnerabilities affecting katywhitton.

• CVE-2009-0335Cross-site scripting (XSS) vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to inject arbitrary web script or HTML via the view parameter.4.3Jan 29, 2009
• CVE-2009-0334SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the day parameter in an archive action.7.5Jan 29, 2009
• CVE-2009-0337SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NOTE: the provenance of this i...7.5Jan 29, 2009
• CVE-2009-0336Katy Whitton BlogIt! stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a ...5.0Jan 29, 2009
• CVE-2009-0248Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter.4.3Jan 22, 2009
• CVE-2009-0249Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct reques...5.0Jan 22, 2009
• CVE-2008-5589SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the (1) txtusername parameter (aka username field) or the (2) tx...7.5Dec 16, 2008
• CVE-2008-5588SQL injection vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the siteID parameter.7.5Dec 16, 2008