Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php.
References
Configurations
History
21 Nov 2024, 00:01
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/16881 - | |
References | () http://securityreason.com/securityalert/755 - | |
References | () http://www.securityfocus.com/bid/14897 - | |
References | () http://www.simplog.org/bugs/bug.php?op=show&bugid=55 - |
Information
Published : 2005-09-27 19:03
Updated : 2024-11-21 00:01
NVD link : CVE-2005-3076
Mitre link : CVE-2005-3076
CVE.ORG link : CVE-2005-3076
JSON object : View
Products Affected
simplog
- simplog
CWE