CVE-2011-5110 Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list...
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Blogs Manager 1.101 and earlier allow remote attackers to execute arbitrary SQL commands via the SearchField parameter in a search action to (1) _authors_list.php, (2) _blogs_list.php, (3) _category_list.php, (4) _comments_list.php, (5) _policy_list.php, (6) _rate_list.php, (7) categoriesblogs_list.php, (8) chosen_authors_list.php, (9) chosen_blogs_list.php, (10) chosen_comments_list.php, and (11) help_list.php in blogs/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| john geo blogs manager | <= 1.101 | No fix listed |
References
- 20111118 Blogs manager <= 1.101 SQL Injection Vulnerability exploit mailing-list
- 77250 vdb-entry
- 77251 vdb-entry
- 77252 vdb-entry
- 77253 vdb-entry
- 77254 vdb-entry
- 77255 vdb-entry
- 77256 vdb-entry
- 77257 vdb-entry
- 77258 vdb-entry
- 77259 vdb-entry
- 77260 vdb-entry
- 46918 third-party-advisory vendor-advisory
- sourceforge.net exploit
- 18129 exploit
- 20111119 Blogs manager <= 1.101 SQL Injection Vulnerability mailing-list
- 50731 exploit vdb-entry
- blogsmanager-searchfield-sql-injection(71401) vdb-entry