CVE-2007-3003

The CVE-2007-3003 entry concerns myBloggie versions up to 2.1.6 with SQL injection in the viewuser action. Affected component: index.php; vulnerable parameters are cat_id and year in the viewuser path. Root cause: improper handling of user-supplied values leading to SQL command execution. Impact:...