Vulnerability Details CVE-2006-1710
SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.2%
CVSS Severity
CVSS v2 Score 7.6
References
- http://secunia.com/advisories/19601
- http://www.securityfocus.com/bid/17435
- http://www.vupen.com/english/advisories/2006/1299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25699
- https://www.exploit-db.com/exploits/1653
- http://secunia.com/advisories/19601
- http://www.securityfocus.com/bid/17435
- http://www.vupen.com/english/advisories/2006/1299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25699
- https://www.exploit-db.com/exploits/1653
Products affected by CVE-2006-1710
-
cpe:2.3:a:design_nation:dnguestbook:2.0