CVE-2006-6993

Multiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote attackers to inject arbitrary SQL commands via the (1) commentname, (2) commentmail, (3) commentwebsite, and (4) comment parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2007-02-12

Last modified

2024-08-07

Affected products

• Neuron Blog (Dev)

References

• http://secunia.com/advisories/19703
• http://www.vupen.com/english/advisories/2006/1406