high7.5
CVE-2008-1626
SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie.
Impact
SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eggblog | Eggblog | through 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://eggblog.net/news.php?id=39
- http://secunia.com/advisories/29583
- http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701
- http://www.securityfocus.com/bid/28497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41512
- http://eggblog.net/news.php?id=39
- http://secunia.com/advisories/29583
- http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701
- http://www.securityfocus.com/bid/28497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41512