CVEvulnerability
CVE-2006-4042
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-08-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters.
Affected configurations
• mywebland mybloggie (<= 2.1.4)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://retrogod.altervista.org/mybloggie_214_sql.html retrogod.altervista.org
- http://secunia.com/advisories/21376 Vendor Advisory
- http://securityreason.com/securityalert/1347 securityreason.com
- http://www.securityfocus.com/archive/1/442323/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19362 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3179 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28241 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2118 www.exploit-db.com
- http://retrogod.altervista.org/mybloggie_214_sql.html retrogod.altervista.org
- http://secunia.com/advisories/21376 Vendor Advisory
- http://securityreason.com/securityalert/1347 securityreason.com
- http://www.securityfocus.com/archive/1/442323/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/19362 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3179 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28241 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/2118 www.exploit-db.com