Blog

Vendor:

First CVE: Sep 12, 2017 · Active for 8 years

3
Total CVEs
More Total CVEs than 68% of tracked products
1.5
Avg CVEs / Year
Higher CVE frequency than 59% of tracked products
9.5
Avg CVSS
Higher Avg CVSS than 87% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Blog over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 12, 2017
8 years ago
Most Recent CVE
Feb 8, 2022
1,631 days ago

CVE Severity & Scoring

Blog3 CVEs
All CVEs353,240 CVEs
HighCritical
Attack Vector
Local0 (0.0%)
Network3 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (33.3%)
High0 (0.0%)
None2 (66.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (3 CVEs).

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2022-23626HIGH
m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings
Feb 8, 20228.844NOYES
CVE-2017-14345CRITICAL
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
Sep 12, 20179.830NONO
CVE-2017-14346CRITICAL
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg, image/png, or image/gif content type for
Sep 12, 20179.829NONO
View all 3 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
33.3% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (3 CVEs).

Media Mentions

Signals from CVEs in this product scope (3 CVEs).

Top CNAs Publishing CVEs For Blog

Top CWEs

Versions

No cataloged versions.