Unscored severity · published Aug 22, 2006
CVE-2006-4284
SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter
–
CVSS
1.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in comments.asp in LBlog 1.05 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LB
Lblog · Lblog
1.05 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4284
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4284
Vendor Advisory
http://secunia.com/advisories/21596
securityreason.com
http://securityreason.com/securityalert/1445
securitytracker.com
http://securitytracker.com/id?1016721
www.osvdb.org
http://www.osvdb.org/28036
www.securityfocus.com
http://www.securityfocus.com/archive/1/443872/100/0/threaded
Exploit
http://www.securityfocus.com/bid/19607
More from Lblog
–
CVE-2007-0077
lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a certain…