CVE-2006-0249

CVE-2006-0249 describes a SQL injection vulnerability in the viewcat.php component of BitDamaged geoBlog MOD_1.0. This flaw allows unauthenticated remote attackers to execute arbitrary SQL commands by manipulating the 'cat' parameter, potentially leading to credential theft and unauthorized file uploads. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity, enabling partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists via ExploitDB, though there is no evidence of active exploitation or significant community discussion surrounding this older vulnerability.