CVE-2008-2823

  • Last update: Apr 13, 2023

Description

SQL injection vulnerability in newsarchive.php in PHPeasyblog (formerly phpeasynews) 1.13 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.

Software From Fixed in
phpeasynews / phpeasyblog - 1.13.x

Details

    • Severity: High
  • CVE: CVE-2008-2823
  • Published: Jun 23, 2008
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs

OWASP TOP 10