CVE-2008-3388

CVE-2008-3388 affects Def-Blog 1.0.3, with documented SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the article parameter to two scripts: comaddok.php and comlook.php . The available sources confirm the vulnerable component and entry points but do...

defblog-sql.txt

================================================================ DefBlog 1.0.3 Multiple Remote SQL Injection Vulnerabilities ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...