high7.5Public exploit code
CVE-2009-1626
SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arb…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- EZ-Blog Beta2 - 'category' SQL Injection2009-04-27 · webapps · php · Verified
Impact
SQL injection vulnerability in public/specific.php in EZ-Blog before Beta 2 20090427, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the category parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Will Kraft | Ez-Blog | through - All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152
- http://www.securityfocus.com/bid/34729
- https://www.exploit-db.com/exploits/8547
- http://sourceforge.net/project/shownotes.php?release_id=678562&group_id=243152
- http://www.securityfocus.com/bid/34729
- https://www.exploit-db.com/exploits/8547