high7.5
CVE-2005-0882
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userp…
Impact
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Birdblog | Birdblog | Versions 1.0.0, 1.1.0 |
References
- NVD record
- CVE.org record
- http://birdblog.sourceforge.net/ChangeLog
- http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5
- http://secunia.com/advisories/14676
- http://securitytracker.com/id?1013548
- http://www.securityfocus.com/bid/12880
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19799
- http://birdblog.sourceforge.net/ChangeLog
- http://cvs.sourceforge.net/viewcvs.py/birdblog/birdblog/admin/admincore.php?r1=1.4&r2=1.5
- http://secunia.com/advisories/14676
- http://securitytracker.com/id?1013548
- http://www.securityfocus.com/bid/12880
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19799