CVE-2006-2977
SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter.
Date published : 2006-06-12
http://www.securityfocus.com/bid/18352
http://www.securityfocus.com/archive/1/436410/100/0/threaded