Sql injection

Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via 1 the blogid parameter to index.php, 2 the user parameter to action.php, or 3 the field parameter to admin/plugins/table/index.php...

CVE-2008-0359

CVE-2008-0359 is documented as multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating PATH_INFO for (1) admin.php or (2) index.php under the photo/ path. The connected records confirm the aff...

CVE-2008-0360

CVE-2008-0360 affects BLOG:CMS 4.2.1b and is caused by SQL injection in three inputs: blogid (index.php), user (action.php), and field (admin/plugins/table/index.php). The vulnerability can allow remote attackers to execute arbitrary SQL; the NVD entry lists a HIGH base score (7.5). Public exploi...