CVE-2008-3090

BlognPlus 2.5.5 - SQL Injection via p, e, d, or m Parameters

Title source: llm

Description

Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the (1) p, (2) e, (3) d, and (4) m parameters, a different vulnerability than CVE-2008-2819.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43592

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30959

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/43593

Exploit, Patch x_refsource_misc

http://vuln.sg/blognplus255-en.html

Various Sources x_refsource_misc

http://www.blogn.org/index.php?e=171

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/30104

Scores

EPSS 0.0139

EPSS Percentile 69.6%

Details

CWE

CWE-89

Status published

Products (1)

blognplus/blognplus 2.5.5

Published Jul 09, 2008

Tracked Since Feb 18, 2026