Published: 21/03/2006 Updated: 21/07/2017

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

VMScore: 645

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and previous versions allow remote malicious users to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
betaparticle betaparticle blog 6.0
betaparticle betaparticle blog 3.0
betaparticle betaparticle blog 4.0
betaparticle betaparticle blog 5.0

#!/usr/bin/perl #Method found & Exploit scripted by nukedx #Contacts > ICQ: 10072 MSN/Main: nukedx@nukedxcom web: wwwnukedxcom #Original advisory: wwwnukedxcom/?viewdoc=20 #Usage: betapl <host> <path> #googledork: [ "Powered by bp blog" ] 9710 pages use IO::Socket; if(@ARGV != 2) { usage(); } else { exploit(); } s ...

NVD-CWE-Other http://www.securityfocus.com/archive/1/428082 http://www.nukedx.com/?viewdoc=20 http://blog.betaparticle.com/UserFiles/File/6fix.txt http://www.securityfocus.com/bid/17148 http://secunia.com/advisories/19292 http://www.osvdb.org/23965 http://www.osvdb.org/23966 http://securitytracker.com/id?1015788 http://securityreason.com/securityalert/600 http://www.vupen.com/english/advisories/2006/1000 https://exchange.xforce.ibmcloud.com/vulnerabilities/25327 https://nvd.nist.gov https://www.exploit-db.com/exploits/1589/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2006-1333

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect