CVE-2008-6250 SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.
MediumCVSS 6.8
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| comdev web blogger | <= 4.1.3 | No fix listed |
| comdev web blogger | = 4.1 | No fix listed |
References
- e-rdc.org exploit
- 31100 third-party-advisory vendor-advisory
- 20080716 [ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability mailing-list
- 30237 vdb-entry
- comdevwebblogger-arcmonth-sql-injection(43776) vdb-entry
- 6079 exploit