CVE-2008-3388

CVE-2008-3388 affects Def-Blog 1.0.3, with documented SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the article parameter to two scripts: comaddok.php and comlook.php . The available sources confirm the vulnerable component and entry points but do...

defblog-sql.txt

================================================================ DefBlog 1.0.3 Multiple Remote SQL Injection Vulnerabilities ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Def_Blog 1.0.3 - comaddok.php?article SQL Injection

DefBlog 1.0.3 - comaddok.php?article SQL Injection source: https://www.securityfocus.com/bid/30289/info DefBlog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...