PT-2007-2719 · Sava · Sava'S Guestbook

Name of the Vulnerable Software and Affected Versions: Sava's Guestbook version 23.11.2006 Description: The issue allows remote attackers to execute arbitrary SQL commands when magic quotes gpc is disabled. This is achieved by exploiting SQL injection vulnerabilities in the add2.php file via the...