Blog Project Blog — known CVE vulnerabilities

Every CVE whose affected-product data names Blog Project Blog, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-14345 — CVSS 9.8 (critical): SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
• CVE-2017-14346 — CVSS 9.8 (critical): upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the image/jpeg, image/pjpeg…
• CVE-2022-23626 — CVSS 8.5 (high): m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been…