ZeroWdd MyBlog XML Injection Vulnerability in BlogMapper.xml

A critical XML injection vulnerability has been identified in ZeroWdd MyBlog version 1.0. The issue arises in the BlogMapper.xml file, specifically within the findBlogList and getTotalBlogs functions. This vulnerability allows for the injection of SQL commands without authorization, and can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unauthorized SQL injection, which could be used to manipulate database queries and potentially access or modify sensitive data.

Reproduction

The vulnerability can be reproduced by sending a request to the admin blogs list endpoint. Include a crafted keyword parameter that exploits the XML injection flaw, such as one that uses the extractvalue function to extract database information.