CVE-2005-1500: SQL Injection
Multiple SQL injection vulnerabilities in myBloggie 2.1.1 allow remote attackers to execute arbitrary SQL commands via (1) the keyword parameter in search.php; or (2) the dateno parameter in viewdate mode, (3) the catid parameter in viewcat mode, the (4) monthno or (5) year parameter in viewmonth mode, or (6) postid parameter in viewid mode to index.php. NOTE: item (1) was discovered to affect 2.1.3 as well.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1500?
CVE-2005-1500 is considered a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2005-1500?
To address CVE-2005-1500, upgrading to myBloggie version 2.1.3 or later is recommended as it contains patches for these SQL injection vulnerabilities.
What are the potential impacts of CVE-2005-1500?
Exploitation of CVE-2005-1500 can lead to unauthorized access to the database, data leakage, or manipulation of the database contents.
Which versions of myBloggie are affected by CVE-2005-1500?
CVE-2005-1500 affects myBloggie versions 2.1.1 and prior; users should upgrade to version 2.1.3 to mitigate the risk.
What types of input parameters are exploited in CVE-2005-1500?
CVE-2005-1500 exploits multiple input parameters including keyword in search.php, date_no in viewdate mode, and others, leading to SQL injection vulnerabilities.