CVE-2008-2963

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2008-07-02

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Myblog (Myblog)

References

• http://www.securityfocus.com/bid/29900
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43292
• https://www.exploit-db.com/exploits/5913