CVE-2008-6368

Description

SQL injection vulnerability in index.php in Chipmunk Guestbook 1.4m allows remote attackers to execute arbitrary SQL commands via the start parameter.

Affected products

• chipmunk-scripts / chipmunk_guestbook1.4m – 1.4m

References

• MISChttp://www.securityfocus.com/bid/18195
• MISChttp://osvdb.org/50343
• MISChttp://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt
• VENDOR_ADVISORYhttp://secunia.com/advisories/32907
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/46941