5 matches found
CVE-2009-1481
SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...
Sql injection
SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...
CVE-2009-1481
PuterJam's Blog (PJBlog3 ) version 3.0.6.170 contains an SQL injection vulnerability in the action.asp file. Remote attackers can execute arbitrary SQL commands by exploiting the cname parameter within the checkAlias action. This vulnerability was confirmed to have been exploited in the wild in A...
CVE-2009-1481
SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...
CVE-2009-1481: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in action.asp in PuterJam's Blog PJBlog3 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009. NOTE: the provenance of this information is unknown; the details are...