Описание
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2006-0563
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24480
- http://attrition.org/pipermail/vim/2006-February/000531.html
- http://hamid.ir/security/pluggedoutblog.txt
- http://secunia.com/advisories/18726
- http://securityreason.com/securityalert/415
- http://securitytracker.com/id?1015586
- http://www.osvdb.org/22926
- http://www.securityfocus.com/archive/1/423948/100/0/threaded
- http://www.vupen.com/english/advisories/2006/0440
EPSS
Процентиль: 85%
0.0274
Низкий
CVE ID
Связанные уязвимости
nvd
больше 20 лет назад
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.
EPSS
Процентиль: 85%
0.0274
Низкий