Sql injection

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

CVE-2009-2337

The CVE-2009-2337 issue affects the w3b|cms Gaestebuch Guestbook Module 3.0.0, where a SQL injection vulnerability exists in includes/module/book/index.inc.php. The underlying cause is an unparameterized SQL query that can be exploited when magic_quotes_gpc is disabled, enabling remote attackers ...