{"cvss":0.0,"datePublished":"2009-04-29T00:00:00Z","dateUpdated":"2009-04-29T00:00:00Z","description":"SQL injection vulnerability in action.asp in PuterJam's Blog (PJBlog3) 3.0.6.170 allows remote attackers to execute arbitrary SQL commands via the cname parameter in a checkAlias action, as exploited in the wild in April 2009.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.","dueDate":"","id":"CVE-2009-1481","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"puterjams_blog","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"pjhome puterjams_blog Improper Neutralization of Special Elements used in an SQL Command","vendor":"pjhome"}