CVE-2006-5219
MEDIUM 5.1EPSS 2.2%
SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.
- CVSS v2.0 NVD
- 5.1 MEDIUM
AV:N/AC:H/Au:N/C:P/I:P/A:P - EPSS
- 2.20% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2006-10-09
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/22309
- http://cvs.moodle.com/blog/index.php?r1=1.18.2.2&r2=1.18.2.3
- http://www.securityfocus.com/bid/20395