CVE-2006-4202 - SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter

Published Aug 17, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.31%

Description

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://secunia.com/advisories/21482
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/19518
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4192
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28374
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2186
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/21482		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/19518		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4192		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/28374		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2186		exploitx_refsource_EXPLOIT-DB