PT-2006-1484 · Minibloggie · Minibloggie

Published 2006-01-25 · Updated 2018-10-19 · CVE-2006-0417

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions miniBloggie versions 1.0 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is achieved via the username and password parameters when gpc magic quotes is disabled.

Recommendations For miniBloggie versions 1.0 and earlier, consider disabling the login functionality in login.php until a patch is available, or enable gpc magic quotes to prevent SQL injection attacks.

Exploit

Fix

Related Identifiers

CVE-2006-0417

Affected Products

Minibloggie

References · 10

• 🔥 http://evuln.com/vulns/47/summary.html · Exploit
• 🔥 https://exploit-db.com/exploits/27125 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0417 · Security Note
• http://osvdb.org/22729 · Note
• http://vupen.com/english/advisories/2006/0310 · Note
• http://securitytracker.com/id?1015534 · Note
• http://securityfocus.com/archive/1/423126/100/0/threaded · Note
• http://securityfocus.com/bid/16367 · Note
• http://secunia.com/advisories/18604 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24280 · Note