CVE-2008-6193

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting2008-06-23 · webapps · php · Verified

Impact

Sam Crew MyBlog stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48843
• https://www.exploit-db.com/exploits/5913
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48843
• https://www.exploit-db.com/exploits/5913