Description
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
References
- 20060803 GaesteChaos <= 0.2 Multiple Vulnerabilities mailing-list
- ADV-2006-3155 vdb-entry
- 21357 third-party-advisory
- 20060803 GaesteChaos <= 0.2 Multiple Vulnerabilities mailing-list
- gastechaos-eintragen-sql-injection(28218) vdb-entry
- 19343 vdb-entry