Unscored CVE-2008-2685 EUVD-2008-2680GHSA-67r6-5wx9-ffwj

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL command…

Published Jun 12, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in article.asp in Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter, a different vector than CVE-2008-2626.

References

ADV-2008-1737 vdb-entry
battleblog-article-sql-injection(43018) vdb-entry
http://www.davethewebguy.com/battleblog/article.asp?entry=24