124 matches found
Sql injection
SQL injection vulnerability in commentsget.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300...
7.5CVSS8.7AI score0.01707EPSS
SaveExploits4References5Affected Software1
CVE-2007-4055
SQL injection vulnerability in commentsget.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this may be related to CVE-2006-4300...
8.2AI score0.01065EPSS
SaveExploits1References5
CVE-2006-4300
CVE-2006-4300 is a SQL injection vulnerability in SimpleBlog 2.0 and earlier, affecting the comments.asp endpoint via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands and has a network attack vector with low attack complexity and no authentication, yielding pa...
7.5CVSS8.3AI score0.01707EPSS
SaveExploits3References7Affected Software1
20