PT-2006-5379 · 8Pixel.Net · 8Pixel.Net Simple Blog

Murderskillz + 1 · Published 2006-09-06 · Updated 2017-10-19 · CVE-2006-4592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 8pixel.net Simple Blog versions 2.3 and earlier

Description The issue allows remote attackers to conduct SQL injection attacks via ">" characters in the id parameter, which are not filtered by the protection mechanism in the default.asp file.

Recommendations For versions 2.3 and earlier, consider restricting access to the default.asp file or the id parameter to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the id parameter in the affected default.asp file until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-4592

Affected Products

8Pixel.Net Simple Blog

References · 7

• 🔥 http://securityfocus.com/bid/19848 · Exploit
• 🔥 https://exploit-db.com/exploits/2296 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-4592 · Security Note
• http://secunia.com/advisories/21755 · Vendor Advisory
• http://securitytracker.com/id?1016793 · Note
• http://vupen.com/english/advisories/2006/3451 · Note
• http://osvdb.org/28541 · Note