{
    "id": "CVE-2008-2963",
    "published": "2008-07-02 17:14:00",
    "last_modified": "2026-06-16 22:54:50",
    "cvss_score": "6.8",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "cwe": "CWE-89",
    "description": "Multiple SQL injection vulnerabilities in MyBlog allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to (a) index.php, and the (2) id parameter to (b) member.php and (c) post.php.",
    "epss_score": "0.00909",
    "epss_percentile": "0.58897",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-13 18:17:07",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "myblog",
            "product": "myblog"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "5913",
            "title": "MyBlog: PHP and MySQL Blog/CMS software - SQL Injection / Cross-Site Scripting",
            "date": "2008-06-23",
            "url": "https://www.exploit-db.com/exploits/5913"
        }
    ],
    "refs_list": [
        "http://www.securityfocus.com/bid/29900",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/43292",
        "https://www.exploit-db.com/exploits/5913",
        "http://www.securityfocus.com/bid/29900",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/43292",
        "https://www.exploit-db.com/exploits/5913"
    ]
}