CVE-2008-1313 - Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors

Published Mar 12, 2008

7.5

HIGH

CVSS 2.0

EPSS 0.97%

Description

Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://secunia.com/advisories/29338
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/28203
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41141
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5234
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/29338		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/28203		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41141		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/5234		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 12, 2008

Updated Aug 7, 2024

Reserved Mar 12, 2008

Link CVE-2008-1313

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-1313

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-1313