high7.5
CVE-2006-2004
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.
Impact
Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Romedahl | Ri Blog | Version 1.1 |
References
- NVD record
- CVE.org record
- http://colander.altervista.org/advisory/riblog.txt
- http://secunia.com/advisories/19783
- http://www.securityfocus.com/archive/1/431868/100/0/threaded
- http://www.securityfocus.com/bid/17654
- http://www.vupen.com/english/advisories/2006/1489
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26132
- http://colander.altervista.org/advisory/riblog.txt
- http://secunia.com/advisories/19783
- http://www.securityfocus.com/archive/1/431868/100/0/threaded
- http://www.securityfocus.com/bid/17654
- http://www.vupen.com/english/advisories/2006/1489
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26132