= 3.5
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.