CVE-2020-36972: Smartdatasoft Smartblog

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare character-by-character of database information.

Affected products

• Smartdatasoft Smartblog: version 2.0.1 only

Published 2026-01-28. Last modified 2026-06-17.