Vulnerabilities > CVE-2006-1683 - SQL Injection vulnerability in Chipmunk Guestbook

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
chipmunk-scripts
exploit available
NVD
Published: 2006-04-11
Updated: 2018-10-18

Summary

SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name.

Vulnerable Configurations

Part Description Count
Application
Chipmunk_Scripts
1

Exploit-Db

descriptionChipmunk Guestbook 1.3 Index.PHP SQL Injection Vulnerability. CVE-2006-1683. Webapps exploit for php platform
idEDB-ID:27629
last seen2016-02-03
modified2006-04-12
published2006-04-12
reporterDr.Jr7
sourcehttps://www.exploit-db.com/download/27629/
titleChipmunk Guestbook 1.3 Index.PHP SQL Injection Vulnerability

References