CVE-2006-0324

SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-x87h-p5vc-9qcp

SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary...

References (22)

• http://evuln.com/vulns/41/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18560
• http://securityreason.com/securityalert/356
• http://securitytracker.com/id?1015522
• http://www.osvdb.org/22670
• http://www.securityfocus.com/archive/1/422364/100/0/threaded
• http://www.securityfocus.com/bid/16319 Exploit
• http://www.vupen.com/english/advisories/2006/0268
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24222
• https://sourceforge.net/forum/forum.php?forum_id=532233
• https://sourceforge.net/project/shownotes.php?release_id=387180&group_id=156586
• http://evuln.com/vulns/41/summary.html Exploit, Vendor Advisory
• http://secunia.com/advisories/18560
• http://securityreason.com/securityalert/356
• http://securitytracker.com/id?1015522