CVE-2006-3905: SQL Injection
Published Jul 27, 2006
·Updated
SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the (1) postid parameter in index.php and (2) search function.
Affected Software
2 affected components
myWebland myBloggie=2.1.3
myWebland myBloggie=2.1.3_beta
Event History
Jul 27, 2006
CVE Published
10:04 PM
Jul 28, 2006
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-3905?
CVE-2006-3905 is considered a critical vulnerability due to its potential for remote SQL command execution.
2
How do I fix CVE-2006-3905?
To fix CVE-2006-3905, users should update to MyBloggie version 2.1.4 or later, which includes security patches.
3
What are the impact and risks associated with CVE-2006-3905?
The impact of CVE-2006-3905 can lead to unauthorized access and manipulation of the database by attackers.
4
Which versions of MyBloggie are affected by CVE-2006-3905?
CVE-2006-3905 affects MyBloggie versions 2.1.3 and 2.1.3_beta.
5
Is there a public exploit available for CVE-2006-3905?
Yes, there are public exploits that demonstrate the SQL injection vulnerability in CVE-2006-3905.