QwikSec

Security Database

CVE

CWE

Training

CVE-2008-3090

Published: Jul 9, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in index.php in BlognPlus (BURO GUN +) 2.5.5 MySQL and PostgreSQL editions allow remote attackers to execute arbitrary SQL commands via the (1) p, (2) e, (3) d, and (4) m parameters, a different vulnerability than CVE-2008-2819.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

blognplus-index-sql-injection(43592)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

blognplus-dm-sql-injection(43593)

vdb-entry

x_refsource_XF

http://vuln.sg/blognplus255-en.html

x_refsource_MISC

http://www.blogn.org/index.php?e=171

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.