cve/2006/CVE-2006-0602.md

CVE-2006-0602

Description

Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php.

POC

Reference

• http://evuln.com/vulns/58/summary.html

Github

No PoCs found on GitHub currently.