CVE-2006-3752

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-21 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.

Affected products

Professional Home Page Tools Guestbook: all versions

References

http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
http://secunia.com/advisories/21102
http://securityreason.com/securityalert/1248
http://securitytracker.com/id?1016550
http://www.securityfocus.com/archive/1/440421/100/0/threaded
http://www.securityfocus.com/bid/19019
http://www.vupen.com/english/advisories/2006/2876
https://exchange.xforce.ibmcloud.com/vulnerabilities/27774
http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
http://secunia.com/advisories/21102
http://securityreason.com/securityalert/1248
http://securitytracker.com/id?1016550

Get alerted when CVE-2006-3752 or the next vulnerability affects your stack