MidnightBSD

Advisories for a-blog

CVE-2010-4917 HIGH

SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor Product Version
a-blog a-blog 2.0