3 matches found
CVE-2025-57263
An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...
CVE-2025-57263
VX Guestbook version 1.07 is affected by an authenticated SQL injection vulnerability. Attackers with admin access can inject malicious SQL payloads by exploiting the "word" POST parameter within the words.php admin panel . The practical consequence is the ability to execute arbitrary SQL command...
CVE-2025-57263: Improper Neutralization of Special Elements used in an SQL Command
An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.php admin panel...