CVE-2006-2004
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.
Date published : 2006-04-25
http://www.securityfocus.com/bid/17654
http://www.securityfocus.com/archive/1/431868/100/0/threaded