← Database

CVE-2008-2823

HIGH CVSS: 7.5 Published: 2008-06-23 Modified: 2026-06-16

Description

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Affected Platforms

Phpeasynews Phpeasyblog

Weakness Type

CWE-89

References