Description
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.
References
- 415 third-party-advisory
- 22926 vdb-entry
- 20060206 VERIFY Pluggedout Blog 1.9.9c exec.php SQL injection mailing-list
- http://hamid.ir/security/pluggedoutblog.txt
- pluggedoutblog-exec-sql-injection(24480) vdb-entry
- ADV-2006-0440 vdb-entry
- 18726 third-party-advisory
- 1015586 vdb-entry
- 20060204 PluggedOut Blog SQL injection and XSS mailing-list