CVE-2009-3665 Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action.
HighCVSS 7.5
EPSS 2.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in index.php in Nullam Blog 0.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) i parameter or (2) v parameters in a register action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nullam blog | = 0.1.2 | No fix listed |
References
- 36648 third-party-advisory vendor-advisory
- 9625 exploit
- 57920 vdb-entry
- 20090909 Nullam Blog Multiple Remote Vulnerabilities mailing-list
- nullam-index-sql-injection(53218) vdb-entry