Uapplication maintains a narrowly focused portfolio of web-accessible applications including photo gallery, blog, and guestbook products that serve small-scale publishing and community use cases. The vendor's disclosures frequently acquire public exploit tooling, reflecting the appeal of these web-facing applications to reconnaissance and initial-access activity. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Uapplication over time
Signals from CVEs in this vendor scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-6247HIGH Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQL commands via the ci parameter to (1) slideshow.asp or (2) t | Dec 4, 2006 | 7.5 | 28 | NO | YES |
CVE-2005-2010MEDIUM Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter. | Jun 20, 2005 | 4.3 | 26 | NO | YES |
CVE-2005-0925MEDIUM Cross-site scripting (XSS) vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. | May 2, 2005 | 4.3 | 21 | NO | YES |
CVE-2007-0799HIGH SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | Feb 6, 2007 | 7.5 | 19 | NO | NO |
CVE-2005-1427HIGH Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb. | May 3, 2005 | 7.5 | 19 | NO | NO |
CVE-2005-1428HIGH edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files. | May 3, 2005 | 7.5 | 19 | NO | NO |
CVE-2007-0798MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) login.asp; | Feb 6, 2007 | 4.3 | 18 | NO | NO |
CVE-2006-2246MEDIUM Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry. | May 9, 2006 | 5.8 | 16 | NO | NO |
CVE-2005-1425MEDIUM Uapplication Uguestbook 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct requ | May 3, 2005 | 5.0 | 15 | NO | NO |
CVE-2005-1426MEDIUM Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct reques | May 3, 2005 | 5.0 | 15 | NO | NO |
Signals from CVEs in this vendor scope (13 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Uapplication.
Media articles that mention a CVE ID that affects a product developed by Uapplication — matched by CVE ID, not by vendor name.