Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2005-0423

Disclosure Date: April 27, 2005 (last updated February 22, 2025)
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field.
0
0
Attacker Value
Unknown

CVE-2005-0424

Disclosure Date: April 27, 2005 (last updated February 22, 2025)
Unknown vulnerability in the delete.asp program in certain versions of ASPjar Guestbook allows remote attackers to delete messages. NOTE: there is insufficient information to know if this is the same issue as CVE-2002-1730.
0
0
Attacker Value
Unknown

CVE-2002-1729

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the "web site" parameter in a guestbook message.
0
0
Attacker Value
Unknown

CVE-2002-1730

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to "true".
0
0