CVE-2006-1013: Smartblog

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.

Affected products

• Smartblog Smartblog: version 1.2 only

Published 2006-03-07. Last modified 2026-06-16.