Skip to content

CVE-2008-0678 SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.

MediumCVSS 6.8 EPSS 0.94%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in index.php in BlogPHP 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a page action.

Affected products

ProductAffected versionsFixed in
blogphp = 2.0 No fix listed

References

  • 28756 third-party-advisory vendor-advisory
  • 27591 vdb-entry
  • 5042 exploit