CVE-2008-2554

EPSS 1.0%

Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/5705unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/3925 https://exchange.xforce.ibmcloud.com/vulnerabilities/42894 https://www.exploit-db.com/exploits/5705 http://www.securityfocus.com/archive/1/492902/100/0/threaded http://www.securityfocus.com/bid/29460