CVE-2006-3618

SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.

Date published : 2006-07-14

http://www.securityfocus.com/archive/1/439486/100/0/threaded

http://www.neosecurityteam.net/index.php?action=advisories&id=23