2 matches found
CVE-2009-0409
SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...
6.8CVSS8.4AI score0.01105EPSS
SaveExploits2References5
CVE-2009-0409: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in offlineauth.php in Max.Blog 1.0.6 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...
6.8CVSS6.4AI score0.01105EPSS
SaveExploits2References2
20