Description
SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter.
References
- 18195 vdb-entry
- 50343 vdb-entry
- http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt
- 32907 third-party-advisory
- chipmunk-index-sql-injection(46941) vdb-entry