CVE-2005-3076: Simplog

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Simplog 0.9.1 might allow remote attackers to execute arbitrary SQL commands or trigger SQL error messages via invalid (1) pid, (2) blogid, (3) cid, or (4) m parameters to archive.php, or the (5) blogid parameter to blogadmin.php.

Affected products

• Simplog Simplog: version 0.9.1 only

Published 2005-09-27. Last modified 2026-06-16.