CVE-2007-0354

MGB Opensource Guestbook < 0.5.4.5 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SlimTim10 · perlwebappsphp

https://www.exploit-db.com/exploits/3141

View Code ZIP pw:eip

References (8)

[Third Party Advisory, VDB Entry] http://osvdb.org/31612

[Exploit] http://www.securityfocus.com/bid/22094

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/31551

[URL Repurposed] http://www.tv-kritik.net/mgb/index.php

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/3141

[Third Party Advisory] http://www.attrition.org/pipermail/vim/2007-January/001246.html

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/0232

[Third Party Advisory] http://secunia.com/advisories/23825

Scores

EPSS 0.0284

EPSS Percentile 86.3%

Details

Status published

Products (1)

mgb/opensource_guestbook < 0.5.4.5

Published Jan 19, 2007

Tracked Since Feb 18, 2026