CVE-2006-0240 - CVE House
Back to Database
Status published High CVE-2006-0240

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote...

Vulnerability Description

Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0240

Credits & Attribution

No credits recorded in the NVD database.

References

More from 8pixel.net

View All →
CVE-2007-4055
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote...
High 7.5
CVE-2006-6192
Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0...
High 7.5
CVE-2006-6191
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and...
High 7.5
CVE-2006-4592
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3...
High 7.5
CVE-2006-4300
SQL injection vulnerability in comments.asp in SimpleBlog 2.0 and earlier...
High 7.5

Affected Vendor

Affected Software

simple blog
Vulnerable Versions:
0

Timeline

Official Publish: January 18th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.