CVE-2006-3065

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.48% chance of exploitation in the next 30 days, 72th percentile

Published

2006-06-19

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/1904

References

• CVE Record
• NVD entry

Related

• CVE-2006-3061
• CVE-2006-3069
• CVE-2006-3059
• CVE-2006-3074
• CVE-2006-3053
• CVE-2006-3076