CVE-2008-6180

EUVD-2008-6150
SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
newlife_bloggernewlife_blogger
𝑥
≤ 3.0
newlife_bloggernewlife_blogger
3.3.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/32214
http://www.pepelux.org/exploits/newlife-es.txt
http://www.securityfocus.com/archive/1/497283/100/0/threaded
http://www.securityfocus.com/bid/31728
http://www.vupen.com/english/advisories/2008/2797
https://exchange.xforce.ibmcloud.com/vulnerabilities/45820
https://exchange.xforce.ibmcloud.com/vulnerabilities/45821
https://www.exploit-db.com/exploits/6739
http://secunia.com/advisories/32214
http://www.pepelux.org/exploits/newlife-es.txt
http://www.securityfocus.com/archive/1/497283/100/0/threaded
http://www.securityfocus.com/bid/31728
http://www.vupen.com/english/advisories/2008/2797
https://exchange.xforce.ibmcloud.com/vulnerabilities/45820
https://exchange.xforce.ibmcloud.com/vulnerabilities/45821
https://www.exploit-db.com/exploits/6739