Unscored CVE-2012-5297 EUVD-2012-5220GHSA-65hw-395w-9g27

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL…

Published Oct 4, 2012 · Updated Aug 6, 2024 · Assigned by mitre

Description

SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

20120103 mavili guestbook - SQL Injection and XSS Vulnerabilities mailing-list
51252 vdb-entry
maviliguestbook-edit-sql-injection(72098) vdb-entry
http://code.google.com/p/maviliguestbook/issues/detail?id=1