Vulnerability Details CVE-2011-5201
Multiple SQL injection vulnerabilities in sign.php in tinyguestbook allow remote attackers to execute arbitrary SQL commands via the (1) name and (2) msg parameters. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 70.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0015.html
- http://code.google.com/p/tinyguestbook/issues/detail?id=3
- http://secunia.com/advisories/47419
- http://www.osvdb.org/78128
- http://www.securityfocus.com/bid/51259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72109
- http://archives.neohapsis.com/archives/bugtraq/2012-01/0015.html
- http://code.google.com/p/tinyguestbook/issues/detail?id=3
- http://secunia.com/advisories/47419
- http://www.osvdb.org/78128
- http://www.securityfocus.com/bid/51259
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72109
Products affected by CVE-2011-5201
-
cpe:2.3:a:steveyolam:tinyguestbook:10.2010