CVE-2006-0249

SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tmpCategory variable).

• CWE-89

• http://evuln.com/vulns/33/summary.htmlExploit
• http://secunia.com/advisories/18504Vendor Advisory
• http://securitytracker.com/id?1015493Exploit
• http://www.osvdb.org/22463Exploit
• http://www.securityfocus.com/bid/16249Exploit
• http://www.vupen.com/english/advisories/2006/0191Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24146
• http://evuln.com/vulns/33/summary.htmlExploit
• http://secunia.com/advisories/18504Vendor Advisory
• http://securitytracker.com/id?1015493Exploit
• http://www.osvdb.org/22463Exploit
• http://www.securityfocus.com/bid/16249Exploit
• http://www.vupen.com/english/advisories/2006/0191Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24146

Published

Jan 18, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0243Cross-site scripting (XSS) vulnerability in SMBCMS 2.1 allow…
• CVE-2006-0244Directory traversal vulnerability in workspaces.php in phpXp…
• CVE-2006-0245Multiple cross-site scripting (XSS) vulnerabilities in CubeC…
• CVE-2006-0246Cross-site scripting (XSS) vulnerability in down.pl in Widex…
• CVE-2006-0247Cross-site scripting (XSS) vulnerability in anyboard.cgi in …
• CVE-2006-0248Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSp…
• CVE-2006-0250Format string vulnerability in the snmp_input function in sn…
• CVE-2006-0251Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O…
• CVE-2006-0252SQL injection vulnerability in Benders Calendar 1.0 allows r…
• CVE-2006-0253Buffer overflow in the Bluetooth OBEX Object Push service in…
• CVE-2006-0254Multiple cross-site scripting (XSS) vulnerabilities in Apach…
• CVE-2006-0255Unquoted Windows search path vulnerability in Check Point VP…