Unrated severityNVD Advisory· Published May 4, 2006· Updated Jun 16, 2026

CVE-2006-2189

Description

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Servous/Sblog2 versions
cpe:2.3:a:servous:sblog:0.7.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:servous:sblog:0.7.2:*:*:*:*:*:*:*
- (no CPE)range: =0.7.2

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/17782nvdExploit
www.subjectzero.net/research/sblog.htmnvdExploit
securityreason.com/securityalert/836nvd
www.osvdb.org/25612nvd
www.securityfocus.com/archive/1/432724/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/26212nvd
exchange.xforce.ibmcloud.com/vulnerabilities/26213nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000