CVE-2006-1013

Published: Mar 7, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.

Affected (1)

Products: Smartblog: Smartblog

Smartblog

1 product

Smartblog

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Smartblog Smartblog	Version 1.2

References (6)

http://www.securityfocus.com/archive/1/426498/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16905

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25220

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/426498/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16905

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25220

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.