Vulnerabilities > CVE-2006-2029 - SQL-Injection vulnerability in Simplog

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
simplog
exploit available
NVD
Published: 2006-04-26
Updated: 2018-10-18

Summary

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) tid parameter in (a) preview.php; the (2) cid, (3) pid, and (4) eid parameters in (b) archive.php; and the (5) pid parameter in (c) comments.php.

Vulnerable Configurations

Part Description Count
Application
Simplog
1

Exploit-Db

  • descriptionSimplog <= 0.9.3 (tid) Remote SQL Injection Exploit. CVE-2006-2029. Webapps exploit for php platform
    idEDB-ID:1705
    last seen2016-01-31
    modified2006-04-21
    published2006-04-21
    reporternukedx
    sourcehttps://www.exploit-db.com/download/1705/
    titleSimplog <= 0.9.3 tid Remote SQL Injection Exploit
  • descriptionSimplog <= 0.9.2 (s) Remote Commands Execution Exploit. CVE-2006-0146,CVE-2006-0147,CVE-2006-1776,CVE-2006-1777,CVE-2006-1778,CVE-2006-1779,CVE-2006-2029....
    fileexploits/php/webapps/1663.php
    idEDB-ID:1663
    last seen2016-01-31
    modified2006-04-11
    platformphp
    port
    published2006-04-11
    reporterrgod
    sourcehttps://www.exploit-db.com/download/1663/
    titleSimplog <= 0.9.2 s Remote Commands Execution Exploit
    typewebapps

References