CVE-2007-6577

CVE-2007-6577 affects zBlog 1.2, with multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to manipulate the database via the categ action (categ parameter) or the articles action (article parameter). Root cause is improper handling/sanitization of user input in i...