CVEvulnerability
CVE-2006-0602
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-02-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php.
Affected configurations
• hinton design phphg guestbook 1.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://evuln.com/vulns/58/summary.html Exploit
- http://secunia.com/advisories/18758 Vendor Advisory
- http://securitytracker.com/id?1015620 Exploit
- http://www.securityfocus.com/archive/1/424740/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16541 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0480 Vendor Advisory
- http://evuln.com/vulns/58/summary.html Exploit
- http://secunia.com/advisories/18758 Vendor Advisory
- http://securitytracker.com/id?1015620 Exploit
- http://www.securityfocus.com/archive/1/424740/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16541 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/0480 Vendor Advisory