CVE-2005-2838

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-09-07 · updated 2026-06-16

Description

SQL injection vulnerability in login.php in myBloggie 2.1.3-beta and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

Affected products

Mywebland Mybloggie: 2.1.1, 2.1.2, 2.1.3_beta

References

http://glide.stanford.edu/yichen/research/sec.pdf
http://marc.info/?l=bugtraq&m=112607358831963&w=2
http://mywebland.com/forums/showtopic.php?t=399
http://secunia.com/advisories/16699
http://www.securityfocus.com/archive/1/419280/100/0/threaded
http://www.securityfocus.com/bid/14739
https://exchange.xforce.ibmcloud.com/vulnerabilities/22162
http://glide.stanford.edu/yichen/research/sec.pdf
http://marc.info/?l=bugtraq&m=112607358831963&w=2
http://mywebland.com/forums/showtopic.php?t=399
http://secunia.com/advisories/16699
http://www.securityfocus.com/archive/1/419280/100/0/threaded

Get alerted when CVE-2005-2838 or the next vulnerability affects your stack