Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via (1) the cat parameter in index.php and (2) the note parameter in blog.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Blog_system | Netart_media | 1.2 (including) | 1.2 (including) |