Show filters
217 Total Results
Displaying 21-30 of 217
Sort by:
Attacker Value
Unknown
CVE-2011-5026
Disclosure Date: December 29, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information.
0
Attacker Value
Unknown
CVE-2010-4987
Disclosure Date: November 01, 2011 (last updated October 04, 2023)
SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter.
0
Attacker Value
Unknown
CVE-2010-4996
Disclosure Date: November 01, 2011 (last updated October 04, 2023)
SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
0
Attacker Value
Unknown
CVE-2010-4865
Disclosure Date: October 05, 2011 (last updated October 04, 2023)
SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.
0
Attacker Value
Unknown
CVE-2010-4358
Disclosure Date: December 01, 2010 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.
0
Attacker Value
Unknown
CVE-2009-4935
Disclosure Date: July 12, 2010 (last updated October 04, 2023)
SQL injection vulnerability in ogp_show.php in Online Guestbook Pro allows remote attackers to execute arbitrary SQL commands via the display parameter.
0
Attacker Value
Unknown
CVE-2009-4760
Disclosure Date: March 29, 2010 (last updated October 04, 2023)
Winn ASP Guestbook 1.01 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for data/guestbook.mdb.
0
Attacker Value
Unknown
CVE-2010-0978
Disclosure Date: March 16, 2010 (last updated October 04, 2023)
KMSoft Guestbook (aka GBook) 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/db.mdb.
0
Attacker Value
Unknown
CVE-2009-4687
Disclosure Date: March 10, 2010 (last updated October 04, 2023)
SQL injection vulnerability in silentum_guestbook.php in Silentum Guestbook 2.0.2 allows remote attackers to execute arbitrary SQL commands via the messageid parameter.
0
Attacker Value
Unknown
CVE-2010-0940
Disclosure Date: March 08, 2010 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in guestbook.php in Simple PHP Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
0
