CVE-2006-3752

2006-07-2023:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

82.6%

JSON

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.

References

artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt

secunia.com/advisories/21102

securityreason.com/securityalert/1248

securitytracker.com/id?1016550

www.securityfocus.com/archive/1/440421/100/0/threaded

www.securityfocus.com/bid/19019

www.vupen.com/english/advisories/2006/2876

exchange.xforce.ibmcloud.com/vulnerabilities/27774