CVE-2006-0234

CVE-2006-0234 describes an SQL injection vulnerability in microBlog 2.0 RC-10, specifically within the index.php file. Attackers can exploit this by manipulating the 'month' and 'year' parameters to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing remote attackers to achieve partial confidentiality, integrity, and availability impacts with low attack complexity and no authentication required. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation or significant community discussion.