CVE:CVE-2006-0602
CNNVD:CNNVD-200602-110
Hinton Design phphg Guestbook 1.2中存在多个SQL注入漏洞。远程攻击者可以借助(1)指向check.php的username参数或指向(2) admin/edit_smilie.php、(3) admin/add_theme.php、(4) admin/ban_ip.php、(5) admin/add_lang.php或(6) admin/edit_filter.php的id参数执行任意SQL命令。
solution:Upgrade hinton_design phphg_guestbook to a higher version than 1.2,and avoid the version 1.2