Back to Database
Status published
High
CVE-2006-3752
Multiple SQL injection vulnerabilities in class.php in Professional Home Page...
Vulnerability Description
Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3752
Credits & Attribution
No credits recorded in the NVD database.
References
- http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
- http://securityreason.com/securityalert/1248
- http://www.securityfocus.com/archive/1/440421/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27774
- http://secunia.com/advisories/21102
- http://www.securityfocus.com/bid/19019
- http://www.vupen.com/english/advisories/2006/2876
- http://securitytracker.com/id?1016550
Affected Vendor
professional home page tools
View all reports →Affected Software
professional home page tools guestbook
Vulnerable Versions:
Unknown
Timeline
Official Publish:
July 20th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.