CVE-2006-5398 - SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter

HIGH

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter

Published Oct 18, 2006

7.5

HIGH

CVSS 2.0

EPSS 1.27%

SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://securitytracker.com/id?1017087		vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/archive/1/449092/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/20556		vdb-entryx_refsource_BID
http://www.simplog.org/archive.php?blogid=1&pid=57		x_refsource_CONFIRM
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-5383		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/29590		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2574		exploitx_refsource_EXPLOIT-DB