CVE-2006-1334

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.3%

from disclosure to weapon6 days

Published on NVDMar 21

1st PoC+6d

exploitation probability

2.3%top 18% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27477 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/27478

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://evuln.com/vulns/101/summary.html http://secunia.com/advisories/19273 http://securityreason.com/securityalert/638 http://securitytracker.com/id?1015818 https://exchange.xforce.ibmcloud.com/vulnerabilities/25295 http://www.osvdb.org/23945 http://www.osvdb.org/23946 http://www.securityfocus.com/archive/1/428903/100/0/threaded http://www.securityfocus.com/bid/17159 http://www.securityfocus.com/bid/17247 http://www.vupen.com/english/advisories/2006/0994