A SQL injection vulnerability exists in bBlog 0.7.3 that will allow a remote user administrative privileges.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34554/SCN200409-1.txt
Source: https://packetstormsecurity.com/files/34554/SCN200409-1.txt.html