← All advisories

High severity7.5NVD Advisory· Published Jan 1, 2019· Updated Jun 17, 2026

CVE-2019-3494

CVE-2019-3494

Description

Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.

Affected products

3

Simply Bit/Simply Bloginferred2 versions
<=2019-01-01+ 1 more
- (no CPE)range: <=2019-01-01
- (no CPE)range: <=2019-01-01
Simply Blog Project/Simply Blog
cpe:2.3:a:simply-blog_project:simply-blog:*:*:*:*:*:*:*:*
Range: <=2019-01-01

Patches

Vulnerability mechanics

References

1

github.com/Paroxyste/Simply-Blog/issues/1nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.