Description
Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields.
References
- ADV-2006-2935 vdb-entry
- 20060721 MicroGuestBook Remote XSS Attack mailing-list
- 28677 vdb-entry
- 19119 vdb-entry
- http://it.security.netsons.org/exploit/MicroGuestBook.txt
- 21155 third-party-advisory
- 1285 third-party-advisory
- micro-guestbook-add-xss(27911) vdb-entry