CVE-2006-0403

Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.

• CWE-89

• http://attrition.org/pipermail/vim/2006-January/000511.html
• http://evuln.com/vulns/43/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18567Vendor Advisory
• http://securityreason.com/securityalert/370
• http://securitytracker.com/id?1015524Exploit
• http://www.osvdb.org/22700
• http://www.osvdb.org/22701
• http://www.securityfocus.com/archive/1/422938/100/0/threaded
• http://www.securityfocus.com/bid/16344Exploit
• http://www.vupen.com/english/advisories/2006/0296Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24245
• http://attrition.org/pipermail/vim/2006-January/000511.html
• http://evuln.com/vulns/43/summary.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/18567Vendor Advisory
• http://securityreason.com/securityalert/370
• http://securitytracker.com/id?1015524Exploit
• http://www.osvdb.org/22700
• http://www.osvdb.org/22701
• http://www.securityfocus.com/archive/1/422938/100/0/threaded
• http://www.securityfocus.com/bid/16344Exploit
• http://www.vupen.com/english/advisories/2006/0296Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24245

Published

Jan 25, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0397Unspecified vulnerability in Safari, LaunchServices, and/or …
• CVE-2006-0398Unspecified vulnerability in Safari, LaunchServices, and/or …
• CVE-2006-0399Unspecified vulnerability in Safari, LaunchServices, and/or …
• CVE-2006-0400CoreTypes in Apple Mac OS X 10.4 up to 10.4.5 allows remote …
• CVE-2006-0401Unspecified vulnerability in Mac OS X before 10.4.6, when ru…
• CVE-2006-0402SQL injection vulnerability in Zoph before 0.5pre1 allows re…
• CVE-2006-0404Note-A-Day Weblog 2.2 stores sensitive data under the web do…
• CVE-2006-0405The TIFFFetchShortPair function in tif_dirread.c in libtiff …
• CVE-2006-0406search.php in MyBB 1.0.2 allows remote attackers to obtain s…
• CVE-2006-0407Cross-site scripting (XSS) vulnerability in post.php in AZ B…
• CVE-2006-0408rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows l…
• CVE-2006-0409Cross-site scripting (XSS) vulnerability in index.php in Pix…