CVE-2008-0424

The CVE-2008-0424 entry concerns Mooseguy Blog System (MGBS) 1.0. The vulnerability is a SQL injection in blog.php caused by input via the month parameter, enabling remote attackers to execute arbitrary SQL commands. Affected software is MGBS 1.0; the exact root cause is an unsafely handled month...