CVE-2008-2669

CVE-2008-2669 affects yBlog 0.2.2.2 and involves multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via parameter inputs: (1) q in search.php, (2) n in user.php, or (3) n in uss.php. The NVD entry lists these as the exposed vectors with a base sco...