CVE-2006-0240

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities2006-01-16 · webapps · asp · Verified

Impact

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18488
• http://www.hackerscenter.com/archive/view.asp?id=21926
• http://www.osvdb.org/22447
• http://www.securityfocus.com/archive/1/422102/100/0/threaded
• http://www.securityfocus.com/bid/16243
• http://www.vupen.com/english/advisories/2006/0194
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24155
• http://secunia.com/advisories/18488
• http://www.hackerscenter.com/archive/view.asp?id=21926
• http://www.osvdb.org/22447
• http://www.securityfocus.com/archive/1/422102/100/0/threaded
• http://www.securityfocus.com/bid/16243
• http://www.vupen.com/english/advisories/2006/0194
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24155