CVE-2008-2963

2008-07-0217:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

41.9%

JSON

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and © post.php.

References

www.securityfocus.com/bid/29900

exchange.xforce.ibmcloud.com/vulnerabilities/43292

www.exploit-db.com/exploits/5913