CVE-2006-0240 - Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts

Published Jan 18, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.29%

Description

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (7)

http://secunia.com/advisories/18488
third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.hackerscenter.com/archive/view.asp?id=21926
x_refsource_MISC
http://www.osvdb.org/22447
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/422102/100/0/threaded
mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://www.securityfocus.com/bid/16243
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/0194
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24155
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/18488		third-party-advisoryx_refsource_SECUNIAExploitVendor Advisory
http://www.hackerscenter.com/archive/view.asp?id=21926		x_refsource_MISC
http://www.osvdb.org/22447		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/422102/100/0/threaded		mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://www.securityfocus.com/bid/16243		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/0194		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/24155		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jan 18, 2006

Updated Aug 7, 2024

Reserved Jan 18, 2006

Link CVE-2006-0240

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-0240

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-0240