Description
SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the entrada parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Aliaksandr Hartsuyeu · textwebappsphp
https://www.exploit-db.com/exploits/27138
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16393
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0327
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/22755
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/24309
Exploit, Vendor Advisory x_refsource_misc
http://evuln.com/vulns/50/summary.html
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/423162
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/377
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18633
Scores
EPSS
0.0300
EPSS Percentile
86.6%
Details
Status
published
Products (1)
andonet/andonet_blog
2004.09.02
Published
Jan 27, 2006
Tracked Since
Feb 18, 2026