Description
SQL injection vulnerability in admin.php in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the username field.
References
- advancedguestbook-sql-injection(15892) vdb-entry
- 20051106 Advanced Guestbook 2.2 ( SQL Injection Exploit ) mailing-list
- 20051216 exploit (html) for Advanced Guestbook 2.2 mailing-list
- 20952 vdb-entry