VulnerabilityModified
CVE-2006-1334
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.
MEDIUM 6.4EPSS 2.36%
Does this matter?
Lower severity and a low EPSS score (2.36%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 2.36% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- maian script world/maian weblog
- Source
- cve@mitre.org
References
- http://evuln.com/vulns/101/summary.html
- http://secunia.com/advisories/19273Vendor Advisory
- http://securityreason.com/securityalert/638
- http://securitytracker.com/id?1015818
- http://www.osvdb.org/23945
- http://www.osvdb.org/23946
- http://www.securityfocus.com/archive/1/428903/100/0/threaded
- http://www.securityfocus.com/bid/17159
- http://www.securityfocus.com/bid/17247
- http://www.vupen.com/english/advisories/2006/0994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25295
- http://evuln.com/vulns/101/summary.html
- http://secunia.com/advisories/19273Vendor Advisory
- http://securityreason.com/securityalert/638
- http://securitytracker.com/id?1015818
- http://www.osvdb.org/23945
- http://www.osvdb.org/23946
- http://www.securityfocus.com/archive/1/428903/100/0/threaded
- http://www.securityfocus.com/bid/17159
- http://www.securityfocus.com/bid/17247
- http://www.vupen.com/english/advisories/2006/0994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25295
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.