Unrated severityNVD Advisory· Published May 11, 2009· Updated Jun 16, 2026

CVE-2008-6805

Description

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Micgr/Mic Blog
cpe:2.3:a:micgr:mic_blog:0.0.3:*:*:*:*:*:*:*
Mic Blog/Mic_Blogllm-create
Range: =0.0.3

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/31787nvdExploit
secunia.com/advisories/32310nvdVendor Advisory
www.osvdb.org/49186nvd
www.osvdb.org/49187nvd
www.osvdb.org/49188nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45932nvd
www.exploit-db.com/exploits/6764nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000