Description
SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159.
References
- 29583 third-party-advisory
- http://eggblog.net/news.php?id=39
- eggblog-unspecified-sql-injection(41512) vdb-entry
- 28497 vdb-entry
- http://sourceforge.net/project/showfiles.php?group_id=155425&package_id=173141&release_id=587701