CVE-2010-4876

mBlogger 1.0.04 - SQL Injection via viewpost.php postID Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4876. PoCs published by Ptrace Security.

AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in mBlogger v1.0.04 via the 'postID' parameter in viewpost.php, allowing an attacker to extract user credentials from the database.

Description

SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Ptrace Security · pythonwebappsphp

https://www.exploit-db.com/exploits/14849

View Code ZIP pw:eip

This exploit demonstrates a SQL injection vulnerability in mBlogger v1.0.04 via the 'postID' parameter in viewpost.php, allowing an attacker to extract user credentials from the database.

Classification

Working Poc 100%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: mBlogger v1.0.04

No auth needed

Prerequisites: Network access to the target web application

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2010/2265

Exploit exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/14849

Scores

EPSS 0.0093

EPSS Percentile 55.9%

Details

CWE

CWE-89

Status published

Products (1)

mblogger_project/mblogger 1.0.04

Published Oct 07, 2011

Tracked Since Feb 18, 2026