CVE-2008-2197

CVE-2008-2197 is a SQL injection in the Miniweb blogwriter module 2.0. The vulnerability exposes index.php via the historymonth parameter, enabling remote attackers to execute arbitrary SQL. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...