CVE-2006-3065

blur6ex 0.3.462 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard. NOTE: This is a similar vulnerability to CVE-2006-1763, but the affected code and versions are different.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1904

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/20646

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/437015/100/0/threaded

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/1904

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/27120

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/2341

[Third Party Advisory] http://securityreason.com/securityalert/1113

Scores

EPSS 0.0133

EPSS Percentile 80.0%

Details

Status published

Products (1)

blursoft/blur6ex 0.3.462

Published Jun 19, 2006

Tracked Since Feb 18, 2026