CVE-2006-3752

The CVE-2006-3752 entry concerns SQL injection in the class.php of the Professional Home Page Tools Guestbook. The vulnerability allows remote attackers to inject SQL via any of the five parameters: hidemail, name, mail, ip, or text, potentially compromising data integrity and confidentiality and...