Published: 06/03/2009 Updated: 11/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote malicious users to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455. NOTE: it was later reported that 2.1.4 is also affected.

Vulnerable Product	Search on Vulmon	Subscribe to Product
e107coders macguru_blog_engine_plugin 2.2

e107 Plugin macgurublog_menu macgurublogphp (uid) Remote Sql inj author: ZoRLu home: z0rlublogspotcom concat: trt-turk@hotmailcom date: 28/10/2008 n0te: YALNIZLIK YiTiRDi ANLAMINI YALNIZLIGIMDA : ( ( n0te: aq kpss : ) ) dork: allinurl:"macgurublogphp?uid=" exploit: localhost/script_path/macgurublogphp?uid=[SQL] [SQL]= -1+ ...

################################################################################################## # # # ::e107 Plugin BLOG Engine v22 (macgurublogphp/uid) Blind SQL Injection Vulnerability:: # # ...

#!/usr/bin/perl ##################################################################################### # e107 Plugin BLOG Engine v22 Blind SQL Injection Exploit # # ::virangar security team:: # # wwwvirangarnet ...

#!/usr/bin/perl ############################################################## # e107 Plugin BLOG Engine v22 SQL Injection Exploit # # ::virangar security team:: # # wwwvirangarnet # # C0d3d BY:virangar security team ( hadihadi ) # #special tnx t ...

CWE-89 http://www.securityfocus.com/bid/29344 http://osvdb.org/51408 http://secunia.com/advisories/30212 http://www.vupen.com/english/advisories/2008/2468 https://exchange.xforce.ibmcloud.com/vulnerabilities/42715 https://www.exploit-db.com/exploits/6856 https://www.exploit-db.com/exploits/6346 https://www.exploit-db.com/exploits/5666 http://www.securityfocus.com/archive/1/492506/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/6856/

CVE-2008-6438

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect