Vulnerabilities > Michiel VAN Baak

DATE CVE VULNERABILITY TITLE RISK
2006-04-12 CVE-2006-1752 Input Validation vulnerability in MvBlog
Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) body fields in a comment.
network
high complexity
michiel-van-baak
2.6
2006-04-12 CVE-2006-1751 SQL Injection vulnerability in Michiel VAN Baak Mvblog
Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
network
low complexity
michiel-van-baak CWE-89
7.5