CVE-2006-4042

Description

Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters.

References

https://www.exploit-db.com/exploits/2118

https://exchange.xforce.ibmcloud.com/vulnerabilities/28241

http://www.vupen.com/english/advisories/2006/3179

http://www.securityfocus.com/bid/19362

http://www.securityfocus.com/archive/1/442323/100/0/threaded

http://securityreason.com/securityalert/1347

http://secunia.com/advisories/21376

http://retrogod.altervista.org/mybloggie_214_sql.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS