A SQL injection vulnerability exists in bBlog 0.7.3 that will allow a remote user administrative privileges.