critical10.0
CVE-2006-2189
SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Impact
SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Servous | Sblog | Version 0.7.2 |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/836
- http://www.osvdb.org/25612
- http://www.securityfocus.com/archive/1/432724/100/0/threaded
- http://www.securityfocus.com/bid/17782
- http://www.subjectzero.net/research/sblog.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26212
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26213
- http://securityreason.com/securityalert/836
- http://www.osvdb.org/25612
- http://www.securityfocus.com/archive/1/432724/100/0/threaded
- http://www.securityfocus.com/bid/17782
- http://www.subjectzero.net/research/sblog.htm
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26212
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26213