PT-2026-30596 · Unknown · Easy Blog Site

Mymy · Published 2026-04-06 · Updated 2026-04-28 · CVE-2026-5646

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Easy Blog Site version 1.0

Description A security issue exists in Easy Blog Site 1.0 related to the login functionality within the login.php file. Manipulation of the username and password arguments can lead to SQL injection. The attack can be initiated remotely, and a public exploit is available.

Recommendations Disable the login functionality in login.php until a fix is available.

Exploit

Fix

SQL injection

Special Elements Injection

Weakness Enumeration

CWE-89

CWE-74

Related Identifiers

CVE-2026-5646

Affected Products

Easy Blog Site

References · 12

• 🔥 https://github.com/MyMySSS/cve/blob/main/cve.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5646 · Security Note
• https://twitter.com/giuseppe_1337/status/2048924460984439165 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2041138292461072759 · Twitter Post
• https://code-projects.org · Note
• https://twitter.com/DFIR_Lab/status/2041120160031879530 · Twitter Post
• https://vuldb.com/submit/786150 · Note
• https://twitter.com/CVEnew/status/2041112201172320453 · Twitter Post
• https://twitter.com/cyberbivash/status/2041136749238235343 · Twitter Post
• https://twitter.com/infoflowcloud/status/2041112625681977553 · Twitter Post
• https://vuldb.com/vuln/355434/cti · Note
• https://vuldb.com/vuln/355434 · Note