CVE-2008-2823 in PHPeasyblog

Summary

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 06/23/2008
• Disclosure: 06/23/2008
• Moderation: VulDB entry created
• Entries: 1: VDB-42872
• CPE: ready
• CWE: CWE-89 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.00414
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-2823
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-2823
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-2823/