Vulnerabilities (CVE)

Filtered by vendor Clicktech Subscribe
Filtered by product Clickblog
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2006-6189 1 Clicktech 1 Clickblog 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter.
CVE-2006-4857 1 Clicktech 1 Clickblog 2024-02-04 7.5 HIGH N/A
SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters.