CVE-2008-2572

CVE-2008-2572 describes a SQL injection in FlashBlog’s php/leer_comentarios.php, exploitable via the articulo_id parameter. The issue is a web-remote injection in a PHP script, leading to arbitrary SQL execution. The vulnerability is documented with a CVSS v2 base score of 7.5 (HIGH), indicating ...

CVE-2008-2572: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in php/leercomentarios.php in FlashBlog allows remote attackers to execute arbitrary SQL commands via the articuloid parameter...

Flash Blog Sql Injection

Name : FlashBlog sql Inyeccion Author : Her0 Dork : "flashblog", allinurl:flashblog.html Greetz : Komtec1,Freak,Knet,Boer,ka0x Proof of Concept :...

FlashBlog - articulo_id SQL Injection

FlashBlog - articuloid SQL Injection Name : FlashBlog sql Inyeccion Author : Her0 Dork : "flashblog", allinurl:flashblog.html Greetz : Komtec1,Freak,Knet,Boer,ka0x Proof of Concept :...

FlashBlog - 'articulo_id' SQL Injection

Name : FlashBlog sql Inyeccion Author : Her0 Dork : "flashblog", allinurl:flashblog.html Greetz : Komtec1,Freak,Knet,Boer,ka0x Proof of Concept :...