CVE-2008-2963

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.

🔗 References (6)

• cve@mitrehttp://www.securityfocus.com/bid/29900
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/43292
• cve@mitrehttps://www.exploit-db.com/exploits/5913
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/29900
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/43292
• af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/5913