CVE-2008-2963

Myblog - SQL Injection

Title source: rule

Description

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by CWH Underground · textwebappsphp
https://www.exploit-db.com/exploits/5913

Scores

EPSS 0.0041
EPSS Percentile 61.2%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

myblog/myblog

Timeline

Published Jul 02, 2008
Tracked Since Feb 18, 2026