30212Third-party advisory
http://secunia.com/advisories/30212 CVE-2008-2455
e107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL Injection
Record summary
CVE-2008-2455 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in comment.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the rid parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBe107 Plugin BLOG Engine 2.2 - 'rid' Blind SQL InjectionExploitDB exploitby SaimeNot analyzed1 file
References
529181vdb entry
http://www.securityfocus.com/bid/29181 blogengine-comment-sql-injection(42386)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/42386 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-2455 5604exploit
https://www.exploit-db.com/exploits/5604