CVE-2007-4919

no score yetEPSS 1.0%

Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to index.php, and allow (2) remote authenticated administrators to execute arbitrary SQL commands via the id parameter to admin/modifpost.php.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2007-09-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

jblog:jblog

References

http://www.securityfocus.com/bid/25669
http://www.vupen.com/english/advisories/2007/3178
https://exchange.xforce.ibmcloud.com/vulnerabilities/36602
https://www.exploit-db.com/exploits/4408
http://www.securityfocus.com/bid/25669

Check your stack JSON