CVE-2006-1426

2006-03-2820:00:00

mitre

www.cve.org

8.9 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.5%

JSON

Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.

References

secunia.com/advisories/19421

www.osvdb.org/24168

www.osvdb.org/24169

www.securityfocus.com/archive/1/428964/100/0/threaded

www.securityfocus.com/bid/17260

www.vupen.com/english/advisories/2006/1135

exchange.xforce.ibmcloud.com/vulnerabilities/25478

exchange.xforce.ibmcloud.com/vulnerabilities/25481