CVEvulnerability
CVE-2006-0240
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-01-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.
Affected configurations
• 8pixel.net simple blog (<= 2.1)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/18488 Exploit, Vendor Advisory
- http://www.hackerscenter.com/archive/view.asp?id=21926 www.hackerscenter.com
- http://www.osvdb.org/22447 www.osvdb.org
- http://www.securityfocus.com/archive/1/422102/100/0/threaded Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/16243 Exploit
- http://www.vupen.com/english/advisories/2006/0194 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24155 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/18488 Exploit, Vendor Advisory
- http://www.hackerscenter.com/archive/view.asp?id=21926 www.hackerscenter.com
- http://www.osvdb.org/22447 www.osvdb.org
- http://www.securityfocus.com/archive/1/422102/100/0/threaded Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/16243 Exploit
- http://www.vupen.com/english/advisories/2006/0194 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24155 exchange.xforce.ibmcloud.com