Skip to content
Threat Feed

Product

Guestbook 0.7.0.2

1 brief RSS
high advisory

MGB OpenSource Guestbook Unauthenticated SQL Injection (CVE-2018-25411)

MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability (CVE-2018-25411) that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter in GET requests to email.php, potentially leading to sensitive database information disclosure.

Guestbook 0.7.0.2 sql-injection cve-2018-25411 web-application
2r 1t 1c