CVEvulnerability
CVE-2008-6805
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php.
Affected configurations
• micgr mic blog 0.0.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/32310 Vendor Advisory
- http://www.osvdb.org/49186 www.osvdb.org
- http://www.osvdb.org/49187 www.osvdb.org
- http://www.osvdb.org/49188 www.osvdb.org
- http://www.securityfocus.com/bid/31787 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45932 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6764 www.exploit-db.com
- http://secunia.com/advisories/32310 Vendor Advisory
- http://www.osvdb.org/49186 www.osvdb.org
- http://www.osvdb.org/49187 www.osvdb.org
- http://www.osvdb.org/49188 www.osvdb.org
- http://www.securityfocus.com/bid/31787 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45932 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6764 www.exploit-db.com