CVE-2008-2455

CVE-2008-2455

EPSS 1.0%

SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/30212 https://exchange.xforce.ibmcloud.com/vulnerabilities/42386 https://www.exploit-db.com/exploits/5604 http://www.securityfocus.com/bid/29181