CVE-2008-2670

2008-06-1201:30:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.8%

JSON

Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889.

References

chroot.org/exploits/chroot_uu_010

securityreason.com/securityalert/3938

www.securityfocus.com/archive/1/493224/100/0/threaded

www.securityfocus.com/bid/29630

www.exploit-db.com/exploits/5774