{"api_version":"1","generated_at":"2026-07-23T04:30:21+00:00","cve":"CVE-2006-3752","urls":{"html":"https://cve.report/CVE-2006-3752","api":"https://cve.report/api/cve/CVE-2006-3752.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2006-3752","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2006-3752"},"summary":{"title":"CVE-2006-3752","description":"Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.","state":"PUBLIC","assigner":"cve@mitre.org","published_at":"2006-07-21 14:03:00","updated_at":"2018-10-17 21:29:00"},"problem_types":["NVD-CWE-Other"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27774","name":"phptguestbook-class-sql-injection(27774)","refsource":"XF","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2006/2876","name":"ADV-2006-2876","refsource":"VUPEN","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1016550","name":"1016550","refsource":"SECTRACK","tags":[],"title":"Professional Home Page Tools Gastebuch Input Validation Hole in 'class.php' Permits SQL Injection Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt","name":"http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt","refsource":"MISC","tags":["Exploit"],"title":"abenteuer-mittelerde.de","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/440421/100/0/threaded","name":"20060717 Professional PHP Tools Guestbook Multiple Vulnerabilities","refsource":"BUGTRAQ","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/21102","name":"21102","refsource":"SECUNIA","tags":["Patch","Vendor Advisory"],"title":"Professional Home Page Tools Guestbook SQL Injection - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/19019","name":"19019","refsource":"BID","tags":[],"title":"Professional Home Page Tools Guestbook Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/1248","name":"1248","refsource":"SREASON","tags":[],"title":"Professional PHP Tools Guestbook Multiple Vulnerabilities - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3752","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3752","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2006","cve_id":"3752","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"professional_home_page_tools","cpe5":"professional_home_page_tools_guestbook","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2006","cve_id":"3752","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"professional_home_page_tools","cpe5":"professional_home_page_tools_guestbook","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2006-3752","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt","refsource":"MISC","url":"http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt"},{"name":"1248","refsource":"SREASON","url":"http://securityreason.com/securityalert/1248"},{"name":"20060717 Professional PHP Tools Guestbook Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/440421/100/0/threaded"},{"name":"phptguestbook-class-sql-injection(27774)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27774"},{"name":"21102","refsource":"SECUNIA","url":"http://secunia.com/advisories/21102"},{"name":"19019","refsource":"BID","url":"http://www.securityfocus.com/bid/19019"},{"name":"ADV-2006-2876","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2006/2876"},{"name":"1016550","refsource":"SECTRACK","url":"http://securitytracker.com/id?1016550"}]}},"nvd":{"publishedDate":"2006-07-21 14:03:00","lastModifiedDate":"2018-10-17 21:29:00","problem_types":["NVD-CWE-Other"],"metrics":{"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*:*:*:*:*:*:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2006","CveId":"3752","Ordinal":"19078","Title":"CVE-2006-3752","CVE":"CVE-2006-3752","Year":"2006"},"notes":[{"CveYear":"2006","CveId":"3752","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the (1) hidemail, (2) name, (3) mail, (4) ip, or (5) text parameters.","Type":"Description","Title":null},{"CveYear":"2006","CveId":"3752","Ordinal":"2","NoteData":"2006-07-20","Type":"Other","Title":"Published"},{"CveYear":"2006","CveId":"3752","Ordinal":"3","NoteData":"2018-10-17","Type":"Other","Title":"Modified"}]}}}