CVE-2009-2553

Summary (CVE-2009-2553) : Multiple SQL injection vulnerabilities in comments.php of Super Simple Blog Script 2.5.4. When magic_quotes_gpc is disabled, an unauthenticated remote attacker can supply input via the entry parameter to manipulate database queries. Public references (NVD) describe arbit...

CVE-2009-2552

CVE-2009-2552 affects Super Simple Blog Script 2.5.4, specifically the comments.php component. The vulnerability is described as multiple directory traversal flaws that allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter. The available sources (...