SQL Injection in Eggblog

CVE-2008-1626

SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.018 (76.5th percentile) — read the EPSS interpretation.

Affected products

Eggblog
N/a — versions n/a

Weakness classification (CWE)

References

cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_CONFIRM, Patch)