Skip to content

CVE-2009-0337 SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NOTE: the provenance of this infor...

HighCVSS 7.5 EPSS 0.97% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in index.asp in Katy Whitton BlogIt! allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

ProductAffected versionsFixed in
katywhitton blogit = _nil_ No fix listed

References

  • 33572 third-party-advisory vendor-advisory
  • 7806 exploit