CVEvulnerability
CVE-2008-2670
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. NOTE: the current_subsection parameter is already covered by CVE-2007-3889.
Affected configurations
• insanelysimple2 isblog 0.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://chroot.org/exploits/chroot_uu_010 Exploit
- http://securityreason.com/securityalert/3938 securityreason.com
- http://www.securityfocus.com/archive/1/493224/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29630 Exploit
- https://www.exploit-db.com/exploits/5774 www.exploit-db.com
- http://chroot.org/exploits/chroot_uu_010 Exploit
- http://securityreason.com/securityalert/3938 securityreason.com
- http://www.securityfocus.com/archive/1/493224/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29630 Exploit
- https://www.exploit-db.com/exploits/5774 www.exploit-db.com