← Database

CVE-2008-2963

MEDIUM CVSS: 6.8 Published: 2008-07-02 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.

Affected Platforms

Myblog Myblog

Weakness Type

CWE-89

References