Description
Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the (1) name and (2) msg parameters. NOTE: some of these details are obtained from third party information.
References
- tinyguestbook-sign-sql-injection(72109) vdb-entry
- 20120103 Re: Tinyguestbook XSS mailing-list
- 51259 vdb-entry
- http://code.google.com/p/tinyguestbook/issues/detail?id=3
- 47419 third-party-advisory
- 78128 vdb-entry