3 matches found
Sql injection
Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...
CVE-2006-1763
Summary (CVE-2006-1763) : Multiple SQL injection vulnerabilities in blur6ex v0.3.452 allow remote attackers to execute arbitrary SQL commands via the ID parameter in blog and content shards. Specifically, the issues affect engine/shards/blog.php (actions g_reply, g_permaPost) and engine/shards/co...
CVE-2006-1763
Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a 1 greply or 2 gpermaPost action to the blog shard engine/shards/blog.php, or a 3 gviewContent action to the content shard...