CVE-2005-3076 Information

Description

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid (2) blogid (3) cid or (4) m parameters to archive.php or the (5) blogid parameter to blogadmin.php.

Reference

http://secunia.com/advisories/16881 http://securityreason.com/securityalert/755 http://www.securityfocus.com/bid/14897 http://www.simplog.org/bugs/bug.php?op=show&bugid=55