CVE-2006-3618
SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pixelated_by_lev:pixelated_by_lev_guestbook
References
- http://www.neosecurityteam.net/index.php?action=advisories&id=23
- http://www.securityfocus.com/archive/1/439486/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27624
- http://www.neosecurityteam.net/index.php?action=advisories&id=23
- http://www.securityfocus.com/archive/1/439486/100/0/threaded