CVE-2007-0354 | Vulnerability Database | Aqua Security

SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Software

Name	Vendor	Start Version	End Version
Opensource_guestbook	Mgb	*	0.5.4.5 (including)

References

http://osvdb.org/31612
http://secunia.com/advisories/23825
http://www.attrition.org/pipermail/vim/2007-January/001246.html
http://www.securityfocus.com/bid/22094
http://www.tv-kritik.net/mgb/index.php
http://www.vupen.com/english/advisories/2007/0232
https://exchange.xforce.ibmcloud.com/vulnerabilities/31551
https://www.exploit-db.com/exploits/3141
http://osvdb.org/31612
http://secunia.com/advisories/23825
http://www.attrition.org/pipermail/vim/2007-January/001246.html
http://www.securityfocus.com/bid/22094
http://www.tv-kritik.net/mgb/index.php
http://www.vupen.com/english/advisories/2007/0232
https://exchange.xforce.ibmcloud.com/vulnerabilities/31551
https://www.exploit-db.com/exploits/3141

NVD	https://nvd.nist.gov/vuln/detail/CVE-2007-0354
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html