CVE-2005-3941

Orca Blog 1.3b and earlier is vulnerable to an SQL injection in blog.php, exploitable via the msg parameter to execute arbitrary SQL. Affected: Orca Blog (1.3b and earlier). Root cause: improper handling of user input in msg. Impact: partial confidentiality/integrity/availability per CVSS, base s...