CVE-2006-4042

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.82%

Published

Aug 9, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMyBloggie 2.1.4 - 'trackback.php' Multiple SQL Injections TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters.

Weaknesses (CWE)

CWE-89

Affected Products (1)

mywebland · mybloggievulnerable

References (16)

http://retrogod.altervista.org/mybloggie_214_sql.html

http://secunia.com/advisories/21376

Vendor Advisory

http://securityreason.com/securityalert/1347

http://www.securityfocus.com/archive/1/442323/100/0/threaded

http://www.securityfocus.com/bid/19362

http://www.vupen.com/english/advisories/2006/3179

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28241

https://www.exploit-db.com/exploits/2118

http://retrogod.altervista.org/mybloggie_214_sql.html

http://secunia.com/advisories/21376

Vendor Advisory

http://securityreason.com/securityalert/1347

http://www.securityfocus.com/archive/1/442323/100/0/threaded

http://www.securityfocus.com/bid/19362

http://www.vupen.com/english/advisories/2006/3179

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28241

https://www.exploit-db.com/exploits/2118

KEV Catalog EPSS Scores Vendors All CVEs