CVE Intelligence

Smartdatasoft Smartblog vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Smartdatasoft Smartblog: 1 record(s), with affected versions and fixes.
cpe:2.3:a:smartdatasoft:smartblog

CVE-2020-36972 High · 7.5 CWE-89 Jan 28, 2026
SmartBlog 2.0.1 - 'id_post' Blind SQL injection
SmartBlog 2.0.1 contains a blind SQL injection vulnerability in the 'id_post' parameter of the details controller that allows attackers to extract database information. Attackers can systematically test and retrieve database contents by injecting crafted SQL queries that compare character-by-character of database information.