Vulnerabilities > CVE-2006-2127 - Unspecified vulnerability in Blog MOD Blog MOD 0.2.3/0.2.4/0.2.4B
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN blog-mod
exploit available
Summary
SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 3 |
Exploit-Db
description | Blog 0.2.3/0.2.4 Mod Weblog_posting.PHP SQL Injection Vulnerability. CVE-2006-2127. Webapps exploit for php platform |
id | EDB-ID:27770 |
last seen | 2016-02-03 |
modified | 2006-04-29 |
published | 2006-04-29 |
reporter | Qex |
source | https://www.exploit-db.com/download/27770/ |
title | Blog 0.2.3/0.2.4 Mod Weblog_posting.PHP SQL Injection Vulnerability |
References
- http://securityreason.com/securityalert/810
- http://securityreason.com/securityalert/810
- http://www.securityfocus.com/archive/1/432602/100/0/threaded
- http://www.securityfocus.com/archive/1/432602/100/0/threaded
- http://www.securityfocus.com/bid/17744
- http://www.securityfocus.com/bid/17744
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- http://www.us-cert.gov/cas/techalerts/TA06-164A.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26198
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26198