CVE-2006-0542

Impact

Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters.

Affected products

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/18761
• http://www.evuln.com/vulns/56/summary.html
• http://www.securityfocus.com/archive/1/424714/100/0/threaded
• http://www.securityfocus.com/bid/16545
• http://www.vupen.com/english/advisories/2006/0465
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24406
• http://secunia.com/advisories/18761
• http://www.evuln.com/vulns/56/summary.html
• http://www.securityfocus.com/archive/1/424714/100/0/threaded
• http://www.securityfocus.com/bid/16545
• http://www.vupen.com/english/advisories/2006/0465
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24406