Chironex Fleckeri

**Name of the Vulnerable Software and Affected Versions** ICBlogger versions 2.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `YID` parameter in the devam.asp file. **Recommendations** For ICBlogger versions 2.0 and earlier, consider restricting access to the devam.asp file until a patch is available. As a temporary workaround, avoid using the `YID` parameter in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** ZIXForum version 1.12 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `RepId` parameter in the "ReplyNew.asp" file. **Recommendations** For ZIXForum version 1.12, avoid using the `RepId` parameter in the ReplyNew.asp file until the issue is resolved. As a temporary workaround, consider restricting access to the ReplyNew.asp file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** SimpleBlog versions 2.0 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the comments.asp file. **Recommendations** For SimpleBlog versions 2.0 and earlier, update to a version later than 2.0 to resolve the issue. As a temporary workaround, consider restricting access to the comments.asp file or avoiding the use of the `id` parameter until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** LBlog versions 1.05 and earlier **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the comments.asp file. **Recommendations** For LBlog versions 1.05 and earlier, update to a version later than 1.05 to resolve the issue. As a temporary workaround, consider restricting access to the comments.asp file to minimize the risk of exploitation. Avoid using the `id` parameter in the affected comments.asp file until the issue is resolved.