PT-2006-4751 · Webland · Mywebland Mybloggie

Matrix_Killer + 1 · Published 2006-07-27 · Updated 2018-10-17 · CVE-2006-3905

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Webland MyBloggie version 2.1.3

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the post id parameter in "index.php" and the search function.

Recommendations For Webland MyBloggie version 2.1.3, avoid using the post id parameter in "index.php" and restrict access to the search function until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2006-3905

Affected Products

Mywebland Mybloggie

References · 8

• 🔥 http://h4cky0u.org/advisories/HYSA-2006-008-mybloggie.txt · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046094.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3905 · Security Note
• http://securityfocus.com/archive/1/441356/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26486 · Note
• http://osvdb.org/displayvuln.php?osvdb_id=26559 · Note
• http://osvdb.org/displayvuln.php?osvdb_id=26560 · Note
• http://marc.info/?l=bugtraq&m=114791192612460&w=2 · Note