cvs.moodle.com
http://cvs.moodle.com/blog/index.php?r1=1.18.2.2&r2=1.18.2.3 CVE-2006-5219
Moodle Blog 1.18.2.2/1.6.2 Module - SQL Injection
Record summary
CVE-2006-5219 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in blog/index.php in the blog module in Moodle 1.6.2 allows remote attackers to execute arbitrary SQL commands via a double-encoded tag parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMoodle Blog 1.18.2.2/1.6.2 Module - SQL InjectionExploitDB exploitby disfigureNot analyzed1 file
References
1020061008 SQL injection - moodlemailing list
http://marc.info/?l=full-disclosure&m=116034301209228&w=2 22309Third-party advisory
http://secunia.com/advisories/22309 1699Third-party advisory
http://securityreason.com/securityalert/1699 20061009 Re: [Full-disclosure] SQL injection - moodlemailing list
http://www.securityfocus.com/archive/1/448018/100/0/threaded 20061008 SQL injection - moodlemailing list
http://www.securityfocus.com/archive/1/448023/100/0/threaded 20395vdb entry
http://www.securityfocus.com/bid/20395 ADV-2006-3957vdb entry
http://www.vupen.com/english/advisories/2006/3957 moodle-index-sql-injection(29377)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29377 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-5219