Description
Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.
References
- 16344 vdb-entry
- 22701 vdb-entry
- http://evuln.com/vulns/43/summary.html
- 22700 vdb-entry
- emoblog-index-sql-injection(24245) vdb-entry
- 370 third-party-advisory
- 1015524 vdb-entry
- 20060125 The parameter in e-moBLOG is "monthy" [sic] mailing-list
- 18567 third-party-advisory
- ADV-2006-0296 vdb-entry
- 20060122 [eVuln] e-moBLOG SQL Injection Vulnerability mailing-list