Description
Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.
References
- http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
- 1248 third-party-advisory
- 20060717 Professional PHP Tools Guestbook Multiple Vulnerabilities mailing-list
- phptguestbook-class-sql-injection(27774) vdb-entry
- 21102 third-party-advisory
- 19019 vdb-entry
- ADV-2006-2876 vdb-entry
- 1016550 vdb-entry