Unscored severity · published May 14, 2008
CVE-2008-2197
SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BW
Blog Writer · Miniweb2
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2197
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2197
Vendor Advisory
http://secunia.com/advisories/30085
Exploit
http://www.securityfocus.com/bid/29061
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42220
www.exploit-db.com
https://www.exploit-db.com/exploits/5548