CVEvulnerability
CVE-2006-1426
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-03-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.
Affected configurations
• pixel motion pixel motion blog
References
- http://secunia.com/advisories/19421 Exploit, Vendor Advisory
- http://www.osvdb.org/24168 www.osvdb.org
- http://www.osvdb.org/24169 www.osvdb.org
- http://www.securityfocus.com/archive/1/428964/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17260 Exploit
- http://www.vupen.com/english/advisories/2006/1135 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25478 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25481 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19421 Exploit, Vendor Advisory
- http://www.osvdb.org/24168 www.osvdb.org
- http://www.osvdb.org/24169 www.osvdb.org
- http://www.securityfocus.com/archive/1/428964/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/17260 Exploit
- http://www.vupen.com/english/advisories/2006/1135 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25478 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25481 exchange.xforce.ibmcloud.com