Security Advisory
CVE-2012-5297
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in edit.asp in Mavili Guestbook, as released in November 2007, allows remote attackers to execute arbitrary SQL commands via the id parameter.