CVE-2008-6805

critical

Description

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php.

References

https://www.exploit-db.com/exploits/6764

https://exchange.xforce.ibmcloud.com/vulnerabilities/45932

http://www.osvdb.org/49188

http://www.osvdb.org/49187

http://www.osvdb.org/49186

http://secunia.com/advisories/32310

Details

Source: Mitre, NVD

Published: 2009-05-11

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.01422