EUVD-2007-5111

Malware in sbrugna...

SimpGB guestbook.php quote Parameter SQL Injection

The remote host is running SimpGB, a web-based guestbook application written in PHP. The version of SimpGB installed on the remote host fails to sanitize user input to the 'quote' parameter of the 'guestbook.php' script before using it in SQL queries. An unauthenticated, remote attacker can...