CVE-2008-3388

CVE-2008-3388 affects Def-Blog 1.0.3, with documented SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the article parameter to two scripts: comaddok.php and comlook.php . The available sources confirm the vulnerable component and entry points but do...

CVE-2008-3388: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Def-Blog 1.0.3 allow remote attackers to execute arbitrary SQL commands via the article parameter to 1 comaddok.php and 2 comlook.php...

defblog-sql.txt

================================================================ DefBlog 1.0.3 Multiple Remote SQL Injection Vulnerabilities ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Def_Blog 1.0.3 - comaddok.php?article SQL Injection

DefBlog 1.0.3 - comaddok.php?article SQL Injection source: https://www.securityfocus.com/bid/30289/info DefBlog is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...