CVE-2008-2455 SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| e107coders e107 blog engine | = 2.2 | No fix listed |
References
- 30212 third-party-advisory
- 29181 exploit vdb-entry
- blogengine-comment-sql-injection(42386) vdb-entry
- 5604 exploit