Sql injection

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976...

CVE-2007-2661

SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976...

CVE-2007-2661

BlogMe 3.0 (archshow.asp) is affected by a SQL injection vulnerability exposed via the var parameter, enabling remote attackers to execute arbitrary SQL commands. This CVE is distinct from CVE-2006-5976. Public exploit references exist (e.g., Exploit-DB), indicating practical exploitability; howe...