CVE-2019-3494

Simply-Blog through 2019-01-01 has SQL Injection via the admin/deleteCategories.php delete parameter.

• CWE-89

• https://github.com/Paroxyste/Simply-Blog/issues/1Exploit, Issue Tracking, Third Party Advisory
• https://github.com/Paroxyste/Simply-Blog/issues/1Exploit, Issue Tracking, Third Party Advisory

Published

Jan 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-3484Mitigates a remote code execution issue in ArcSight Logger v…
• CVE-2019-3485Mitigates a stored cross site scripting issue in ArcSight Lo…4.6
• CVE-2019-3486Mitigates a stored cross site scripting issue in ArcSight Se…4.6
• CVE-2019-3489An unauthenticated file upload vulnerability has been identi…
• CVE-2019-3490A DOM based XSS vulnerability has been identified in the Net…
• CVE-2019-3493A potential security vulnerability has been identified in Mi…
• CVE-2019-3495An issue was discovered on Wifi-soft UniBox controller 0.x t…8.8
• CVE-2019-3496An issue was discovered on Wifi-soft UniBox controller 3.x d…8.8
• CVE-2019-3497An issue was discovered on Wifi-soft UniBox controller 0.x t…8.8
• CVE-2019-3498In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.…
• CVE-2019-3500aria2c in aria2 1.33.1, when --log is used, can store an HTT…7.8
• CVE-2019-3501The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via…