Security Advisory

CVE-2008-1639

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-04-02 17:00:00
Last updated 2024-08-07 08:32:00
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php.