CVE-2007-3003 in myBloggieinformation

Résumé

par MITRE

Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id or (2) year parameter to index.php in a viewuser action, different vectors than CVE-2005-1500 and CVE-2005-4225.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Réserver

04/06/2007

Divulgation

04/06/2007

Modérer

accepté

Entrée

VDB-37097

CPE

prêt

Exploitation

Télécharger

EPSS

0.00579

KEV

non

Activités

très faible

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!