CVE-2007-2305

Published: Apr 26, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

Affected (1)

Products: Qdblog: Qdblog

Qdblog

1 product

Qdblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qdblog Qdblog	version ≤ 0.4

References (10)

http://osvdb.org/35746

Source: cve@mitre.org

http://www.securityfocus.com/bid/23485

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/1387

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33631

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3729

Source: cve@mitre.org

http://osvdb.org/35746