SQL injection vulnerability in bblog_plugins/builtin.help.php in bBlog 0.7.6 allows remote malicious users to execute arbitrary SQL commands via the mod parameter.
bblog wbblog 0.7.6