high7.5Public exploit code
CVE-2006-5976
Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Pa…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- blogme 3.0 - Cross-Site Scripting / Authentication Bypass2006-11-14 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drumster | Blogme | Version 3.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/22902
- http://securityreason.com/securityalert/1882
- http://www.securityfocus.com/archive/1/451563/100/0/threaded
- http://www.securityfocus.com/bid/21071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30285
- https://www.exploit-db.com/exploits/2781
- http://secunia.com/advisories/22902
- http://securityreason.com/securityalert/1882
- http://www.securityfocus.com/archive/1/451563/100/0/threaded
- http://www.securityfocus.com/bid/21071
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30285
- https://www.exploit-db.com/exploits/2781