CVE

Id
12706  
CVE No.
CVE-2005-1500  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the date_no parameter in viewdate mode, (3) the cat_id parameter in viewcat mode, the (4) month_no or (5) year parameter in viewmonth mode, or (6) post_id parameter in viewid mode to index.php. NOTE: item (1) was discovered to affect 2.1.3 as well.  
Phase
Assigned (20050511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
91522 12706 CVE-2005-1500 BUGTRAQ:20050505 Multiple vulnerabilities in myBloggie 2.1.1  View
91523 12706 CVE-2005-1500 URL:http://marc.info/?l=bugtraq&m=111531904608224&w=2  View
91524 12706 CVE-2005-1500 MISC:http://mywebland.com/forums/viewtopic.php?t=180  View
91525 12706 CVE-2005-1500 BUGTRAQ:20050527 SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2  View
91526 12706 CVE-2005-1500 URL:http://marc.info/?l=bugtraq&m=111722848308367&w=2  View
91527 12706 CVE-2005-1500 BID:13507  View
91528 12706 CVE-2005-1500 URL:http://www.securityfocus.com/bid/13507  View
91529 12706 CVE-2005-1500 BID:15017  View
91530 12706 CVE-2005-1500 URL:http://www.securityfocus.com/bid/15017  View
91531 12706 CVE-2005-1500 SECUNIA:14980  View
91532 12706 CVE-2005-1500 URL:http://secunia.com/advisories/14980  View
91533 12706 CVE-2005-1500 XF:mybloggie-sql-injection(20439)  View

Related JVN