CVE-2006-3832

Gerrit VAN Aaken Loudblog - SQL Injection

Title source: rule

Description

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/2050

View Code ZIP pw:eip

References (9)

[Exploit] http://loudblog.de/forum/viewtopic.php?id=762

[Exploit] http://retrogod.altervista.org/loudblog_05_sql.html

[Third Party Advisory, VDB Entry] http://www.osvdb.org/27442

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/440763/100/0/threaded

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/27896

[Various Sources] http://loudblog.de/forum/viewtopic.php?id=770

[Third Party Advisory] http://secunia.com/advisories/21157

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/2934

[Third Party Advisory] http://securityreason.com/securityalert/1274

Scores

EPSS 0.0403

EPSS Percentile 88.5%

Details

Status published

Products (9)

gerrit_van_aaken/loudblog 0.1

gerrit_van_aaken/loudblog 0.2

gerrit_van_aaken/loudblog 0.3

gerrit_van_aaken/loudblog 0.4

gerrit_van_aaken/loudblog 0.5

gerrit_van_aaken/loudblog 0.41

gerrit_van_aaken/loudblog 0.42

gerrit_van_aaken/loudblog 0.43

gerrit_van_aaken/loudblog 0.44

Published Jul 25, 2006

Tracked Since Feb 18, 2026