CVE-2006-0602 Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to....
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hinton design phphg guestbook | = 1.2 | No fix listed |
References
- evuln.com exploit
- 18758 third-party-advisory vendor-advisory
- 1015620 exploit vdb-entry
- 20060211 [eVuln] phphg Guestbook Multiple Vulnerabilities mailing-list
- 16541 vdb-entry
- ADV-2006-0480 vdb-entry vendor-advisory