CVE-2006-0563

HIGH

7.5

CVSS Severity Score

EPSS Score0.0540%

EPSS Percentile33.90th

Published2006年2月6日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.

Affected Platforms (CPE)

📦

Pluggedout

Pluggedout Blog

= 1.9.9c

References & Advisories

🔗 http://attrition.org/pipermail/vim/2006-February/000531.html

🔗 http://hamid.ir/security/pluggedoutblog.txt

🔗 http://secunia.com/advisories/18726

🔗 http://securityreason.com/securityalert/415

🔗 http://securitytracker.com/id?1015586

🔗 http://www.osvdb.org/22926

🔗 http://www.securityfocus.com/archive/1/423948/100/0/threaded

🔗 http://www.vupen.com/english/advisories/2006/0440

Vulnerability Description

Affected Platforms (CPE)

Pluggedout Blog

References & Advisories

相關漏洞威脅