CVE-2006-3752

Description

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/27774

http://www.vupen.com/english/advisories/2006/2876

http://www.securityfocus.com/bid/19019

http://www.securityfocus.com/archive/1/440421/100/0/threaded

http://securitytracker.com/id?1016550

http://securityreason.com/securityalert/1248

http://secunia.com/advisories/21102

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS