| Título | myWebland myBloggie 2.1.6, 2.1.4 Authorization Bypass |
|---|
| Descripción | A SQL injection flaw in the myBloggie login module allows crafted input to bypass the authentication query. Due to improper escaping and handling of backslashes and null bytes, an attacker may manipulate the SQL statement used for verifying user credentials, potentially gaining unauthorized access. |
|---|
| Fuente | ⚠️ https://github.com/ixpqxi/CVE_LIST/blob/master/myBloggie/authorization_bypass.md |
|---|
| Usuario | ixpqxi (UID 83247) |
|---|
| Sumisión | 2025-12-01 03:46 (hace 10 meses) |
|---|
| Moderación | 2025-12-12 12:10 (11 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 26245 [Mywebland myBloggie 2.1.1/2.1.2/2.1.3 Beta Login login.php username inyección SQL] |
|---|
| Puntos | 0 |
|---|