CVE-2007-2305 Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qdblog | <= 0.4 | No fix listed |
References
- 35746 vdb-entry
- 23485 exploit vdb-entry
- ADV-2007-1387 vdb-entry
- qdblog-login-sql-injection(33631) vdb-entry
- 3729 exploit