high7.5Public exploit code
CVE-2006-4202
SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (2)2006-09-24 · webapps · asp · Verified
- Spidey Blog Script 1.5 - 'proje_goster.asp' SQL Injection (1)2006-08-14 · webapps · asp · Verified
Impact
SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Spidey Blog | Spidey Blog Script | through 1.5 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21482
- http://www.securityfocus.com/bid/19518
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28374
- https://www.exploit-db.com/exploits/2186
- http://secunia.com/advisories/21482
- http://www.securityfocus.com/bid/19518
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28374
- https://www.exploit-db.com/exploits/2186