Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability

____________________ ___ ___ ________ \_ _____/\_ ___ \ / | \\_____ \ | __)_ / \ \// ~ \/ | \ | \\ \___\ Y / | \ /_______ / \______ /\___|_ /\_______ / \/ \/ \/ \/ .OR.ID ECHO_ADV_100$2008 ----------------------------------------------------------------------------------------- [ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni Date : July, 14 th 2008 Location : Jakarta, Indonesia Web : http://e-rdc.org/v1/news.php?readmore=102 Critical Lvl : Medium Impact : System access Where : From Remote --------------------------------------------------------------------------- Affected software description: ~~~~~~~~~~~~~~~~~~~~~~~~~~~ Application : Comdev Web Blogger version : <= 4.1.3 Vendor : http://www.comdevweb.com/blogger.php Description : Comdev Web Blogger is your voice and also allows others to give you feedback on a post-by-post basis. Site members can now create, manage, upload photos to their own blogs.FEATURES: Non Template-Based Gives You Flexibility to Fit the Web Blogger to Your Web Design Page â