CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...

CVE-2008-5311

The CVE-2008-5311 entry concerns a SQL injection in the NetArt Media Blog System 1.5, specifically in the file image.php , where the vulnerable parameter is id . Remote attackers could alter the SQL query and execute arbitrary commands through this parameter. The associated data indicates a HIGH ...

CVE-2005-4049

Blog System 1.2 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands through (1) the cat parameter in index.php and (2) the note parameter in blog.php. The CVE entry reports these flaws and the NVD assessment indicates a high impact with ne...