{"id":"CVE-2006-3618","aliases":["EUVD-2006-3613","GHSA-2vj3-75qw-x4pm"],"status":"published","title":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and...","description":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01285,"percentile":0.70329,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-07-14T21:00:00Z","modified":"2026-06-16T22:27:25Z","products":[{"vendor":"pixelated_by_lev","product":"pixelated_by_lev_guestbook"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27624","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/439486/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.neosecurityteam.net/index.php?action=advisories\u0026id=23","tags":["x_refsource_MISC","x_transferred","Exploit","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3618"},{"url":"https://github.com/advisories/GHSA-2vj3-75qw-x4pm"}],"sources":{"cve":[{"id":"CVE-2006-3618","description":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.","status":"published","published":"2006-07-14T21:00:00Z","modified":"2024-08-07T18:39:53.953Z","updated_at":"2026-11-02T14:33:49.265317Z"}],"euvd":[{"id":"EUVD-2006-3613","description":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.","status":"published","published":"2006-07-14T21:00:00Z","modified":"2024-08-07T18:39:53Z","updated_at":"2026-11-03T01:15:55.422871Z"}],"ghsa":[{"id":"GHSA-2vj3-75qw-x4pm","title":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and...","description":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.","status":"published","published":"2022-05-01T07:10:52Z","modified":"2023-01-31T05:01:34Z","updated_at":"2026-11-02T14:48:05.292639Z"}],"nvd":[{"id":"CVE-2006-3618","description":"SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) website, (4) comments, (5) rate, and (6) private parameters.","status":"published","published":"2006-07-18T15:47:00Z","modified":"2026-06-16T22:27:25.89Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:04.288594Z"}]}}