Description
Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters.
References
- 16545 vdb-entry
- ADV-2006-0465 vdb-entry
- 20060209 [eVuln] GuestBookHost Authentication Bypass mailing-list
- 18761 third-party-advisory
- guestbookhost-login-sql-injection(24406) vdb-entry
- http://www.evuln.com/vulns/56/summary.html