Description
Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the (1) p, (2) e, (3) d, and (4) m parameters, a different vulnerability than CVE-2008-2819.
References
- blognplus-index-sql-injection(43592) vdb-entry
- 30959 third-party-advisory
- 30104 vdb-entry
- blognplus-dm-sql-injection(43593) vdb-entry
- http://vuln.sg/blognplus255-en.html
- http://www.blogn.org/index.php?e=171