CVE-2008-6180: Newlife Blogger

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie.

Affected products

• Newlife Blogger Newlife Blogger: up to and including 3.0; version 3.3.1 only

Published 2009-02-19. Last modified 2026-06-16.