Unrated severityNVD Advisory· Published Aug 11, 2008· Updated Apr 23, 2026

CVE-2008-3588

Description

Multiple SQL injection vulnerabilities in phsBlog 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to comments.php, (2) cid parameter to index.php, and the (3) urltitle parameter to entries.php.

Affected products

Phsblog/Phsblog
cpe:2.3:a:phsblog:phsblog:0.1.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityreason.com/securityalert/4135nvd
exchange.xforce.ibmcloud.com/vulnerabilities/44163nvd
www.exploit-db.com/exploits/6190nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000