{"id":"CVE-2008-2963","aliases":["EUVD-2008-2953","GHSA-v4x7-h7pv-94wj"],"status":"published","title":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL...","description":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00909,"percentile":0.60161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2008-07-02T17:00:00Z","modified":"2026-06-16T22:54:50Z","exploits":[{"source":"exploitdb","id":"EDB-5913","title":"MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting","type":"webapps","platform":"php","date":"2008-06-23","verified":true,"url":"https://www.exploit-db.com/exploits/5913"}],"products":[{"vendor":"myblog","product":"myblog"}],"references":[{"url":"http://www.securityfocus.com/bid/29900","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://www.exploit-db.com/exploits/5913","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43292","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2963"},{"url":"https://github.com/advisories/GHSA-v4x7-h7pv-94wj"}],"sources":{"cve":[{"id":"CVE-2008-2963","description":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.","status":"published","published":"2008-07-02T17:00:00Z","modified":"2024-08-07T09:21:35.062Z","updated_at":"2026-11-02T14:34:45.083276Z"}],"euvd":[{"id":"EUVD-2008-2953","description":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.","status":"published","published":"2008-07-02T17:00:00Z","modified":"2024-08-07T09:21:35Z","updated_at":"2026-11-03T01:38:54.148162Z"}],"ghsa":[{"id":"GHSA-v4x7-h7pv-94wj","title":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL...","description":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.","status":"published","published":"2022-05-01T23:55:22Z","modified":"2023-01-31T05:07:01Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:49:08.279119Z"}],"nvd":[{"id":"CVE-2008-2963","description":"Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.","status":"published","published":"2008-07-02T17:14:00Z","modified":"2026-06-16T22:54:50Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:01:27.025121Z"}]}}