CVE-2006-3296

The CVE-2006-3296 entry describes a SQL injection in Open Guestbook 0.5, exploitable via the offset parameter in view.php to allow remote execution of arbitrary SQL commands. Affected software: Open Guestbook 0.5; vulnerable component: view.php (offset parameter). Underlying cause: improper sanit...