CVE-2006-4039

CVE-2006-4039 describes multiple SQL injection vulnerabilities in GaesteChaos 0.2 and earlier, specifically within the eintragen.php script. Attackers can exploit this by manipulating the gastname, gastwohnort, or gasteintrag parameters to execute arbitrary SQL commands. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication or complex attack vectors, and potentially leading to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.