cpe:/a:comdev:comdev_web_blogger:4.1 cpe:/a:comdev:comdev_web_blogger:4.1.3 CVE-2008-6250 2009-02-23T12:30:00.420-05:00 2017-09-28T21:33:03.043-04:00 6.8 NETWORK MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2009-02-24T12:09:00.000-05:00 BUGTRAQ 20080716 [ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability BID 30237 SECUNIA 31100 EXPLOIT-DB 6079 XF comdevwebblogger-arcmonth-sql-injection(43776) MISC http://e-rdc.org/v1/news.php?readmore=102 SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.