CVE-2006-0602
Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2006-02-08
- Last modified
- 2024-08-07
- Weaknesses
- CWE-89
Affected products
References
- http://evuln.com/vulns/58/summary.html
- http://secunia.com/advisories/18758
- http://securitytracker.com/id?1015620
- http://www.securityfocus.com/archive/1/424740/100/0/threaded
- http://www.securityfocus.com/bid/16541
- http://www.vupen.com/english/advisories/2006/0480
