CVE-2006-1710 EXPLOIT
7.6
HIGH · CVSS 2.0 · EPSS 1.8% (pctl 78)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters.
Scoring
| CVSS | 7.6 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
| EPSS | 1.8% — more likely to be exploited than 78% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-04-11 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| design nation | dnguestbook |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | dnGuestbook 2.0 - SQL Injection | 2006-04-09 |
References
- http://secunia.com/advisories/19601
- http://www.securityfocus.com/bid/17435
- http://www.vupen.com/english/advisories/2006/1299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25699
- https://www.exploit-db.com/exploits/1653
- http://secunia.com/advisories/19601
- http://www.securityfocus.com/bid/17435
- http://www.vupen.com/english/advisories/2006/1299
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25699
- https://www.exploit-db.com/exploits/1653
→ the Explorer · watch your stack · NVD