Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci (2) d or (3) m parameter to index.asp or the (4) bi parameter to blog_comment.asp.