VYPR
Unrated severityNVD Advisory· Published Apr 13, 2006· Updated Apr 16, 2026

CVE-2006-1778

CVE-2006-1778

Description

Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php.

Affected products

1
  • cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*
    Range: <=0.9.2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

11

News mentions

0

No linked articles in our index yet.