CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.03% chance of exploitation in the next 30 days, 80th percentile

Published

2006-01-25

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://evuln.com/vulns/43/summary.html

References

• CVE Record
• NVD entry

Related

• CVE-2006-0396
• CVE-2006-0404
• CVE-2006-0395
• CVE-2006-0407
• CVE-2006-0372
• CVE-2006-0409