Blogcms
Vendor:
First CVE: Jan 18, 2008 · Active for 18 years
4
Total CVEs
Bottom 1%
2.0
Avg CVEs / Year
Bottom 1%
6.3
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Blogcms over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 18, 2008
18 years ago
Most Recent CVE
Sep 10, 2018
2,878 days ago
CVE Severity & Scoring
Blogcms4 CVEs
50%
50%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network1 (25.0%)
Unknown3 (75.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (25.0%)
High0 (0.0%)
Unknown3 (75.0%)
User Interaction
None0 (0.0%)
Unknown3 (75.0%)
Required1 (25.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (25.0%)
Unknown3 (75.0%)
Top CVEs
Signals from CVEs in this product scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-0360HIGH Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parameter to index.php, (2) the user parameter | Jan 18, 2008 | 7.5 | 28 | NO | YES |
CVE-2018-16779MEDIUM BlogCMS through 2016-10-25 has XSS via a comment. | Sep 10, 2018 | 6.1 | 21 | NO | NO |
CVE-2008-0359MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin.php or (2) index | Jan 18, 2008 | 4.3 | 21 | NO | YES |
CVE-2008-0450HIGH Multiple PHP remote file inclusion vulnerabilities in BLOG:CMS 4.2.1.c allow remote attackers to execute arbitrary PHP code via a URL in the (1) DIR_PLUGINS parameter to (a) index. | Jan 25, 2008 | 7.5 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (4 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
50.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (4 CVEs).
Media Mentions
Signals from CVEs in this product scope (4 CVEs).
Top CNAs Publishing CVEs For Blogcms
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.2.1_c | 3 | 6.4 | 1.4% | 0 | 2 |