← Database

CVE-2006-0249

HIGH CVSS: 7.5 Published: 2006-01-18 Modified: 2026-06-16

Description

SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable).

Affected Platforms

Bitdamaged Geoblog

Weakness Type

CWE-89

References