Vulnerabilities > Logz > Logz > 1.3.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-11-04 | CVE-2008-4897 | SQL Injection vulnerability in Logz 1.3.1 SQL injection vulnerability in fichiers/add_url.php in Logz podcast CMS 1.3.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the art parameter. | 6.8 |
| 2008-11-04 | CVE-2008-4896 | Cross-Site Scripting vulnerability in Logz 1.3.1 Cross-site scripting (XSS) vulnerability in fichiers/add_url.php in Logz CMS 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the art parameter. | 4.3 |