Bolivar

**Name of the Vulnerable Software and Affected Versions** 8pixel.net simpleblog versions 2.3 and earlier **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the `id` parameter in the "admin/edit.asp" endpoint. **Recommendations** For versions 2.3 and earlier, update to a version later than 2.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** BasicForum versions 1.1 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the "edit.asp" endpoint. **Recommendations** For BasicForum versions 1.1 and earlier, avoid using the `id` parameter in the edit.asp endpoint until the issue is resolved. As a temporary workaround, consider restricting access to the edit.asp endpoint to minimize the risk of exploitation.