CVE-2006-1013 in SMartBlog

Summary

PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 03/06/2006
• Disclosure: 03/06/2006
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-73 (Confirmed)
• CVSS: 7.3
• EPSS: 0.03359
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-1013
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-1013
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-1013/