CVE-2008-2356

SQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote attackers to execute arbitrary SQL commands via the postid parameter...

CVE-2008-2356

The CVE-2008-2356 entry concerns an SQL injection in index.php of Archangel Weblog 0.90.02 and earlier, exploitable via the post_id parameter to allow remote execution of arbitrary SQL commands. Affected software is Archangel Weblog (version 0.90.02 and earlier); the underlying vulnerability is i...