Vulnerabilities > Insanelysimple2 > Isblog > 0.5

DATE	CVE	VULNERABILITY TITLE	RISK
2008-06-12	CVE-2008-2670	SQL Injection vulnerability in Insanelysimple2 Isblog 0.5 Multiple SQL injection vulnerabilities in index.php in Insanely Simple Blog 0.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter, or (2) the term parameter in a search action. network low complexity insanelysimple2 CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.