Vulnerabilities > CVE-2007-1304 - Unspecified vulnerability in Savas Place Savas Guestbook 20061123
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) country, (3) email, (4) website, and (5) message parameters.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |