CVE-2006-1123

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie...

Sql injection

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie...

CVE-2006-1123

The CVE covers a SQL injection in D2KBlog 1.0.3 and earlier, exploitable via the memName cookie parameter. Root cause: unsafely constructed SQL using cookie data, enabling remote execution of arbitrary SQL commands. Impact is high (complete confidentiality, integrity, and availability) per the CV...