Advanced Guestbook web application version 2.2 is susceptible to a SQL injection attack.
7a3fb78927cf75c8430152863d12821dcc4b50c274835342578b8d7e3568556e
The widely-used Advanced Guestbook 2.2 webapplication (PHP, MySQL) appears vulnerable to SQL Injection granting the attacker administrator access. The attack is very simple and consists of inputting the following password string leaving the username entry blank:
') OR ('a' = 'a
Regards,
JQ
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed