CVE-2008-6180

The CVE-2008-6180 entry concerns a SQL injection in the file system/nlb_user.class.php of NewLife Blogger (versions 3.0 and earlier, possibly 3.3.1). The vulnerability allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie, indicating an authentication/input handling weakne...