CVE-2008-0360

CVE-2008-0360 affects BLOG:CMS 4.2.1b and is caused by SQL injection in three inputs: blogid (index.php), user (action.php), and field (admin/plugins/table/index.php). The vulnerability can allow remote attackers to execute arbitrary SQL; the NVD entry lists a HIGH base score (7.5). Public exploi...