CVE-2010-4876

mBlogger 1.0.04 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Ptrace Security · pythonwebappsphp
https://www.exploit-db.com/exploits/14849

References (2)

Core 2
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2265
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14849

Scores

EPSS 0.0011
EPSS Percentile 29.0%

Details

CWE
CWE-89
Status published
Products (1)
mblogger_project/mblogger 1.0.04
Published Oct 07, 2011
Tracked Since Feb 18, 2026