Filtered by vendor Code-projects Subscriptions
Filtered by product Eblog Site Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-13575 1 Code-projects 1 Eblog Site 2025-11-25 6.3 Medium
A security vulnerability has been detected in code-projects Blog Site 1.0. Impacted is the function category_exists of the file /resources/functions/blog.php of the component Category Handler. Such manipulation of the argument name/field leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.
CVE-2025-13576 1 Code-projects 1 Eblog Site 2025-11-25 6.3 Medium
A vulnerability was detected in code-projects Blog Site 1.0. The affected element is an unknown function of the file /admin.php. Performing manipulation results in improper authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. Multiple endpoints are affected.
CVE-2025-8859 2 Code-projects, Fabianros 2 Eblog Site, Eblog Site 2025-08-13 6.3 Medium
A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.