Unscored CVE-2006-3905 EUVD-2006-3899GHSA-ccgh-8jg7-9fjj

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parame…

Published Jul 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) post_id parameter in index.php and (2) search function.

References

20060517 HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list
20060727 Re: HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list
26559 vdb-entry
26560 vdb-entry
http://www.h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt
mybloggie-index-sql-injection(26486) vdb-entry
20060517 HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection mailing-list