CVEvulnerability
CVE-2007-4919
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-09-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php.
Affected configurations
• jblog jblog 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.securityfocus.com/bid/25669 Exploit
- http://www.vupen.com/english/advisories/2007/3178 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36602 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4408 www.exploit-db.com
- http://www.securityfocus.com/bid/25669 Exploit
- http://www.vupen.com/english/advisories/2007/3178 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36602 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4408 www.exploit-db.com