Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2019-13949

Disclosure Date: July 18, 2019 (last updated November 27, 2024)
SyGuestBook A5 Version 1.2 has no CSRF protection mechanism, as demonstrated by CSRF for an index.php?c=Administrator&a=update admin password change.
0
0
Attacker Value
Unknown

CVE-2019-13950

Disclosure Date: July 18, 2019 (last updated November 27, 2024)
index.php?c=admin&a=index in SyGuestBook A5 Version 1.2 has stored XSS via a reply to a comment.
0
0
Attacker Value
Unknown

CVE-2019-13948

Disclosure Date: July 18, 2019 (last updated November 27, 2024)
SyGuestBook A5 Version 1.2 allows stored XSS because the isValidData function in include/functions.php does not properly block XSS payloads, as demonstrated by a crafted use of the onerror attribute of an IMG element.
0
0