CVE-2007-0354
MGB OpenSource Guestbook <= 0.5.4.5 - SQL Injection via email.php id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-0354. PoCs published by SlimTim10.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in MGB <= 0.5.4.5 to extract the admin password from the database. It sends a crafted HTTP request to retrieve the password hash and constructs the admin login URL.
Description
SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by SlimTim10 · perlwebappsphp
https://www.exploit-db.com/exploits/3141
This exploit targets a SQL injection vulnerability in MGB <= 0.5.4.5 to extract the admin password from the database. It sends a crafted HTTP request to retrieve the password hash and constructs the admin login URL.
Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target:
MGB <= 0.5.4.5
No auth needed
Prerequisites:
Target must be running MGB <= 0.5.4.5 · Target must be accessible via HTTP
devstral-2 · analyzed Feb 16, 2026
Full analysis →
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/31612
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/22094
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/31551
URL Repurposed x_refsource_confirm
http://www.tv-kritik.net/mgb/index.php
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/3141
Third Party Advisory mailing-list
x_refsource_vim
http://www.attrition.org/pipermail/vim/2007-January/001246.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/0232
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23825
Scores
EPSS
0.0199
EPSS Percentile
78.1%
Details
Status
published
Products (1)
mgb/opensource_guestbook
< 0.5.4.5
Published
Jan 19, 2007
Tracked Since
Feb 18, 2026