CVE-2007-5189

CVE-2007-5189 concerns multiple SQL injection vulnerabilities in the file mes_add.php of the web app x-script GuestBook 1.3a . The issue arises when the PHP setting magic_quotes_gpc is disabled, allowing remote attackers to manipulate the database by injecting SQL through the parameters name, ema...