Unrated severityNVD Advisory· Published May 11, 2009· Updated Apr 23, 2026

CVE-2008-6805

Description

Multiple SQL injection vulnerabilities in Mic_Blog 0.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to category.php, the (2) user parameter to login.php, and the (3) site parameter to register.php.

Affected products

Micgr/Mic Blog
cpe:2.3:a:micgr:mic_blog:0.0.3:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/31787nvdExploit
secunia.com/advisories/32310nvdVendor Advisory
www.osvdb.org/49186nvd
www.osvdb.org/49187nvd
www.osvdb.org/49188nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45932nvd
www.exploit-db.com/exploits/6764nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000