CVE-2008-3588

2008-08-1123:00:00

mitre

www.cve.org

8.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.8%

JSON

Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php.

References

securityreason.com/securityalert/4135

exchange.xforce.ibmcloud.com/vulnerabilities/44163

www.exploit-db.com/exploits/6190