CVE-2006-4300

CVE-2006-4300 is a SQL injection vulnerability in SimpleBlog 2.0 and earlier, affecting the comments.asp endpoint via the id parameter. The issue allows remote attackers to execute arbitrary SQL commands and has a network attack vector with low attack complexity and no authentication, yielding pa...

CVE-2006-4592

The CVE-2006-4592 entry concerns the 8pixel.net Simple Blog 2.3 and earlier . The vulnerability is an incomplete blacklist allowing SQL injection via the id parameter in default.asp where ">" characters bypass protection. This enables remote attackers to perform SQL injection. References indic...

CVE-2006-6191

CVE-2006-6191 affects 8pixel.net SimpleBlog prior to or including version 2.3. The vulnerability is an SQL injection in admin/edit.asp via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry corroborates a possible high-severity impact with base score 7.5 ...

CVE-2007-4055

CVE-2007-4055 concerns an SQL injection in SimpleBlog 3.0, via comments_get.asp’s id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and is noted as possibly related to CVE-2006-4300. Affected software appears to be SimpleBlog 3.0 (comments_get.asp); the roo...

CVE-2006-0240

CVE-2006-0240 involves multiple SQL injection vulnerabilities in Simple Blog 2.1 . The flaws allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly other parameters in unspecified scripts. The primary sources consistently descri...

CVE-2006-0239

CVE-2006-0239 describes multiple cross-site scripting (XSS) vulnerabilities in Simple Blog 2.1. An attacker can inject arbitrary script/HTML via (1) a comment to comments.asp and (2) possibly other fields in unspecified scripts. The accessible impact is partial confidentiality and integrity (per ...

CVE-2006-6192

CVE-2006-6192 affects 8pixel.net SimpleBlog 3.0 and earlier, where unspecified scripts in the admin directory do not properly authenticate. This allows remote attackers to add users and perform other unauthorized privileged actions. The CVSS metrics indicate NETWORK attack vector, no authenticati...