CVE-2008-3588 Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3)....
HighCVSS 7.5
EPSS 1.00%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phsblog | = 0.1.1 | No fix listed |
References
- 4135 third-party-advisory
- phsblog-multiple-sql-injection(44163) vdb-entry
- 6190 exploit