CVE-2006-0240 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 69)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via the month parameter in an archives view operation and possibly certain other parameters in unspecified scripts.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.29% — more likely to be exploited than 69% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-01-18 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| 8pixel.net | simple blog |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | SimpleBlog 2.1 - Multiple Input Validation Vulnerabilities | 2006-01-16 |
References
- http://secunia.com/advisories/18488
- http://www.hackerscenter.com/archive/view.asp?id=21926
- http://www.osvdb.org/22447
- http://www.securityfocus.com/archive/1/422102/100/0/threaded
- http://www.securityfocus.com/bid/16243
- http://www.vupen.com/english/advisories/2006/0194
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24155
- http://secunia.com/advisories/18488
- http://www.hackerscenter.com/archive/view.asp?id=21926
- http://www.osvdb.org/22447
- http://www.securityfocus.com/archive/1/422102/100/0/threaded
- http://www.securityfocus.com/bid/16243
- http://www.vupen.com/english/advisories/2006/0194
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24155
→ the Explorer · watch your stack · NVD