{"api_version":"1","generated_at":"2026-07-23T09:48:17+00:00","cve":"CVE-2006-1778","urls":{"html":"https://cve.report/CVE-2006-1778","api":"https://cve.report/api/cve/CVE-2006-1778.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-1778","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-1778"},"summary":{"title":"CVE-2006-1778","description":"Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2006-04-13 10:02:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.osvdb.org/24561","name":"http://www.osvdb.org/24561","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://secunia.com/advisories/19628","name":"http://secunia.com/advisories/19628","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Simplog Multiple Vulnerabilities and Security Issues - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/17491","name":"http://www.securityfocus.com/bid/17491","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Simplog Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://retrogod.altervista.org/simplog_092_incl_xpl.html","name":"http://retrogod.altervista.org/simplog_092_incl_xpl.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Error 404 :(","mime":"text/plain","httpstatus":"404","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/702","name":"http://securityreason.com/securityalert/702","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Simplog <=0.9.2 multiple vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.exploit-db.com/exploits/1663","name":"https://www.exploit-db.com/exploits/1663","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Simplog <= 0.9.2 (s) Remote Commands Execution Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/430743/100/0/threaded","name":"http://www.securityfocus.com/archive/1/430743/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/24560","name":"http://www.osvdb.org/24560","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25776","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25776","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1015904","name":"http://securitytracker.com/id?1015904","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - Simplog Include File Bug in 'doc/index.php' Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/1332","name":"http://www.vupen.com/english/advisories/2006/1332","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-1778","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-1778","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"1778","vulnerable":"1","versionEndIncluding":"0.9.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"simplog","cpe5":"simplog","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2006","cve_id":"1778","cve":"CVE-2006-1778","epss":"0.042890000","percentile":"0.900890000","score_date":"2026-07-22","updated_at":"2026-07-23 00:09:35"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T17:27:28.815Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"19628","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/19628"},{"name":"simplog-index-archive-sql-injection(25776)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25776"},{"name":"1015904","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015904"},{"name":"1663","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/1663"},{"name":"20060412 Simplog <=0.9.2 multiple vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/430743/100/0/threaded"},{"name":"24560","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/24560"},{"name":"17491","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/17491"},{"name":"702","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/702"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://retrogod.altervista.org/simplog_092_incl_xpl.html"},{"name":"24561","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/24561"},{"name":"ADV-2006-1332","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2006/1332"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2006-04-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-18T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"19628","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/19628"},{"name":"simplog-index-archive-sql-injection(25776)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25776"},{"name":"1015904","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015904"},{"name":"1663","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/1663"},{"name":"20060412 Simplog <=0.9.2 multiple vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/430743/100/0/threaded"},{"name":"24560","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/24560"},{"name":"17491","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/17491"},{"name":"702","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/702"},{"tags":["x_refsource_MISC"],"url":"http://retrogod.altervista.org/simplog_092_incl_xpl.html"},{"name":"24561","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/24561"},{"name":"ADV-2006-1332","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2006/1332"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-1778","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"19628","refsource":"SECUNIA","url":"http://secunia.com/advisories/19628"},{"name":"simplog-index-archive-sql-injection(25776)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/25776"},{"name":"1015904","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015904"},{"name":"1663","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/1663"},{"name":"20060412 Simplog <=0.9.2 multiple vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/430743/100/0/threaded"},{"name":"24560","refsource":"OSVDB","url":"http://www.osvdb.org/24560"},{"name":"17491","refsource":"BID","url":"http://www.securityfocus.com/bid/17491"},{"name":"702","refsource":"SREASON","url":"http://securityreason.com/securityalert/702"},{"name":"http://retrogod.altervista.org/simplog_092_incl_xpl.html","refsource":"MISC","url":"http://retrogod.altervista.org/simplog_092_incl_xpl.html"},{"name":"24561","refsource":"OSVDB","url":"http://www.osvdb.org/24561"},{"name":"ADV-2006-1332","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/1332"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2006-1778","datePublished":"2006-04-13T10:00:00.000Z","dateReserved":"2006-04-13T00:00:00.000Z","dateUpdated":"2024-08-07T17:27:28.815Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2006-04-13 10:02:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:simplog:simplog:*:*:*:*:*:*:*:*","versionEndIncluding":"0.9.2","matchCriteriaId":"768E3141-0A67-4C59-9275-107C08CC90DA"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"1778","Ordinal":"1","Title":"CVE-2006-1778","CVE":"CVE-2006-1778","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"1778","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) archive.php, the (2) m and (3) y parameters in archive.php, and the (4) sql parameter in (c) server.php.","Type":"Description","Title":"CVE-2006-1778"},{"CveYear":"2006","CveId":"1778","Ordinal":"2","NoteData":"2006-04-13","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"1778","Ordinal":"3","NoteData":"2018-10-18","Type":"Other","Title":"Modified"}]}}}