CVE-2006-2189: Servous Sblog

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135.

Affected products

• Servous Sblog: version 0.7.2 only

Published 2006-05-04. Last modified 2026-06-16.