VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 16, 2009· Updated Jun 16, 2026

CVE-2009-3718

CVE-2009-3718

Description

SQL injection vulnerability in admin/authenticate.asp in Battle Blog 1.25 and 1.30 build 2 allows remote attackers to execute arbitrary SQL commands via the UserName parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Davethewebguy/Battle Blog2 versions
    cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:davethewebguy:battle_blog:1.25:*:*:*:*:*:*:*
    • cpe:2.3:a:davethewebguy:battle_blog:1.30:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.