CVE-2006-0249

EPSS 1.3%

SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable).

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/27087unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://evuln.com/vulns/33/summary.html http://secunia.com/advisories/18504 http://securitytracker.com/id?1015493 https://exchange.xforce.ibmcloud.com/vulnerabilities/24146 http://www.osvdb.org/22463 http://www.securityfocus.com/bid/16249 http://www.vupen.com/english/advisories/2006/0191