CVE-2006-1778 json
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL command…
published 2006-04-13 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-1778
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 4.4%
- EPSS 4.4% chance of exploitation in 30 days, percentile 91%
- public exploits
- 1
- Exploit-DB
Summary
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php.
Timeline
- First public exploit (EDB-1663)
- Published
Exploit prediction
4.39% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-1663 Simplog 0.9.2 - 's' Remote Command Execution webapps, 2006-04-11
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
exploit-db.com
/exploits/1663
exploit
-
secunia.com
/advisories/19628
third-party-advisory, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/25776
vdb-entry
-
securitytracker.com
/id?1015904
vdb-entry
-
securityfocus.com
/archive/1/430743/100/0/threaded
mailing-list
-
osvdb.org
/24560
vdb-entry
-
securityfocus.com
/bid/17491
vdb-entry
-
securityreason.com
/securityalert/702
third-party-advisory
- retrogod.altervista.org /simplog_092_incl_xpl.html
-
osvdb.org
/24561
vdb-entry
-
vupen.com
/english/advisories/2006/1332
vdb-entry
Sources
- CVE List CVE-2006-1778
- NVD CVE-2006-1778
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.