CVE-2006-1778

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.39% chance of exploitation in the next 30 days, 91st percentile

Published

2006-04-13

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1663

Security advisories

• http://secunia.com/advisories/19628
• http://www.securityfocus.com/bid/17491

References

• CVE Record
• NVD entry