CVE-2008-2669

2008-06-1201:30:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.8%

JSON

Multiple SQL injection vulnerabilities in yBlog 0.2.2.2 allow remote attackers to execute arbitrary SQL commands via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.

References

chroot.org/exploits/chroot_uu_009

secunia.com/advisories/30607

securityreason.com/securityalert/3935

www.securityfocus.com/archive/1/493222/100/0/threaded

www.securityfocus.com/bid/29629

exchange.xforce.ibmcloud.com/vulnerabilities/42959

www.exploit-db.com/exploits/5773