Skip to content

CVE-2007-1302

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is...

6.8 Medium

CVE-2007-1302 is a medium vulnerability (CVSS 6.8) in Li-scripts Li-guestbook, published March 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.29%, the 70th percentile. No source names a fixed version.

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected.

Exploit likelihood

1.29%Down 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected.

Record: CVE-2007-1302
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected.

Record: CVE-2007-1302
Updated: 2026-11-02

EUVDEUVD-2007-1299 No score

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected.

Record: EUVD-2007-1299
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4v94-xg93-8jj8 No score

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is...

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected.

Record: GHSA-4v94-xg93-8jj8
Weakness: CWE-89
Updated: 2026-11-02

Affected products

li-scripts li-guestbook

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References

Show 4 moreShow less