high7.5Public exploit code
CVE-2008-2455
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection2008-05-13 · webapps · php · Verified
Impact
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| E107coders | E107 Blog Engine | Version 2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/30212
- http://www.securityfocus.com/bid/29181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42386
- https://www.exploit-db.com/exploits/5604
- http://secunia.com/advisories/30212
- http://www.securityfocus.com/bid/29181
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42386
- https://www.exploit-db.com/exploits/5604