CVE-2006-4592

The CVE-2006-4592 entry concerns the 8pixel.net Simple Blog 2.3 and earlier . The vulnerability is an incomplete blacklist allowing SQL injection via the id parameter in default.asp where ">" characters bypass protection. This enables remote attackers to perform SQL injection. References indic...

CVE-2006-4592: Undefined Security Weakness

Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via "" characters in the id parameter, which are not filtered by the protection mechanism...