CVE-2006-2029 - Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php

Back Back to CVE browser

MEDIUM

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php

Published Apr 26, 2006

6.4

MEDIUM

CVSS 2.0

EPSS 2.30%

Description

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (12)

http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html
mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/19764
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/799
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1015976
vdb-entryx_refsource_SECTRACK
http://www.nukedx.com/?getxpl=25
x_refsource_MISC
http://www.osvdb.org/24877
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/24878
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/24879
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/431760/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.simplog.org/archive.php?blogid=1&pid=57
x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/1493
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25982
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0649.html		mailing-listx_refsource_FULLDISC
http://secunia.com/advisories/19764		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/799		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1015976		vdb-entryx_refsource_SECTRACK
http://www.nukedx.com/?getxpl=25		x_refsource_MISC
http://www.osvdb.org/24877		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/24878		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/24879		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/archive/1/431760/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.simplog.org/archive.php?blogid=1&pid=57		x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2006/1493		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/25982		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 26, 2006

Updated Aug 7, 2024

Reserved Apr 25, 2006

Link CVE-2006-2029

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-2029

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-2029