CVE-2006-0602

Multiple SQL injection vulnerabilities in Hinton Design phphg Guestbook 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) username parameter to check.php or the id parameter to (2) admin/edit_smilie.php, (3) admin/add_theme.php, (4) admin/ban_ip.php, (5) admin/add_lang.php, or (6) admin/edit_filter.php.

• CWE-89

• http://evuln.com/vulns/58/summary.htmlExploit
• http://secunia.com/advisories/18758Vendor Advisory
• http://securitytracker.com/id?1015620Exploit
• http://www.securityfocus.com/archive/1/424740/100/0/threaded
• http://www.securityfocus.com/bid/16541
• http://www.vupen.com/english/advisories/2006/0480Vendor Advisory
• http://evuln.com/vulns/58/summary.htmlExploit
• http://secunia.com/advisories/18758Vendor Advisory
• http://securitytracker.com/id?1015620Exploit
• http://www.securityfocus.com/archive/1/424740/100/0/threaded
• http://www.securityfocus.com/bid/16541
• http://www.vupen.com/english/advisories/2006/0480Vendor Advisory

Published

Feb 8, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-0592Unspecified vulnerability in the Lexmark Printer Sharing Lex…
• CVE-2006-0593Cross-site scripting (XSS) vulnerability in PHP-Fusion befor…
• CVE-2006-0597Multiple stack-based buffer overflows in elogd.c in elog bef…
• CVE-2006-0598Buffer overflow in elogd.c in elog before 2.5.7 r1558-4 allo…
• CVE-2006-0599The (1) elog.c and (2) elogd.c components in elog before 2.5…
• CVE-2006-0600elog before 2.5.7 r1558-4 allows remote attackers to cause a…
• CVE-2006-0603Multiple cross-site scripting vulnerabilities in signed.php …
• CVE-2006-0604check.php in Hinton Design phphg Guestbook 1.2 does not chec…
• CVE-2006-0605Multiple cross-site scripting (XSS) vulnerabilities in Unkno…
• CVE-2006-0606SQL injection vulnerability in Unknown Domain Shoutbox 2005.…
• CVE-2006-0607check.php in Hinton Design phphd 1.0 does not check password…
• CVE-2006-0608Multiple SQL injection vulnerabilities in Hinton Design phph…