CVE-2008-6805

CVE-2008-6805 affects Mic_Blog 0.0.3. When magic_quotes_gpc is disabled, remote attackers can cause SQL injection via (1) cat in category.php, (2) user in login.php, and (3) site in register.php, leading to arbitrary SQL execution. CVSS v2 base score is 6.8 (MEDIUM); attack vector is NETWORK, wit...