Description
SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands via the entry parameter.
References
- 2323 third-party-advisory
- http://www.majorsecurity.de/advisory/major_rls25.txt
- 20060722 [MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities mailing-list
- advancedguestbook-guestbook-sql-injection(27908) vdb-entry
- 19905 third-party-advisory