VYPR
← All advisories
High severity8.2NVD Advisory· Published Jan 28, 2026· Updated Jun 17, 2026

CVE-2020-36972

CVE-2020-36972

Description

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare character-by-character of database information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Smartdatasoft/SmartBlog3 versions
    cpe:2.3:a:smartdatasoft:smartblog:2.0.1:*:*:*:*:prestashop:*:*+ 2 more
    • cpe:2.3:a:smartdatasoft:smartblog:2.0.1:*:*:*:*:prestashop:*:*
    • (no CPE)range: =2.0.1
    • (no CPE)range: 2.0.1
  • Smartblog/Smartblogllm-fuzzy
    Range: =2.0.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.