Unrated severityNVD Advisory· Published Dec 31, 2006· Updated Jun 16, 2026
CVE-2006-6880
CVE-2006-6880
Description
Multiple SQL injection vulnerabilities in code/guestadd.php in PHP-Update 2.7 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) newmessage, (2) newname, (3) newwebsite, or (4) newemail parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:php-update:php-update:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php-update:php-update:*:*:*:*:*:*:*:*range: <=2.7
- (no CPE)range: <=2.7
Patches
Vulnerability mechanics
References
3- www.securityfocus.com/bid/21772nvdExploit
- secunia.com/advisories/23486nvdVendor Advisory
- www.exploit-db.com/exploits/3017nvd
News mentions
0No linked articles in our index yet.