CVE-2008-6077: Loudblog

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in loudblog/ajax.php in LoudBlog 0.8.0a and earlier allows remote authenticated users to execute arbitrary SQL commands via the colpick parameter in a singleread action.

Affected products

• Loudblog Loudblog: up to and including 0.8.0a; version 0.5 only; version 0.6 only; version 0.7 only; version 0.8.0 only

Published 2009-02-06. Last modified 2026-06-16.