Michael Romedahl: Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score
6.8
EPSS Score
0.068
Published
2007-01-09
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.
CVSS Score
7.5
EPSS Score
0.01
Published
2006-04-25