Neuron Blog

DATE	CVE	VULNERABILITY TITLE	RISK
2007-02-12	CVE-2006-6993	SQL-Injection vulnerability in DEV Neuron Blog 1.1 Multiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote attackers to inject arbitrary SQL commands via the (1) commentname, (2) commentmail, (3) commentwebsite, and (4) comment parameters. network low complexity dev	7.5
2006-04-20	CVE-2006-1899	HTML Injection vulnerability in DEV Neuron Blog 1.1 Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters. network high complexity dev	2.6